CVE-2019-12477

This exploit demonstrates a remote file inclusion vulnerability in Supra Smart Cloud TV's `openLiveURL` function, allowing unauthenticated attackers to broadcast arbitrary video content via a crafted HTTP request to `/remote/media_control`. The vulnerability is triggered by manipulating the `uri` parameter to point to an attacker-controlled `.m3u8` file.

This Metasploit module exploits an unauthenticated remote file inclusion vulnerability in Supra Smart Cloud TV by broadcasting a fake video via a crafted HTTP request. It serves malicious media files to trigger the vulnerability.