D-Link DCS - Unauth Credential Dump (CVE-2020-25078)

Dumps camera credentials from /config/getuser?index=0 CVE-2020-25078. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS unauthenticated credential dump via /config/getuser CVE-2020-25078.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary,...

D-Link DCS-2530L and DCS-2670L Information Disclosure Vulnerability

The DCS-2530L and DCS-2670L are Full HD 180-degree Wi-Fi cameras from D-Link. A security vulnerability exists in cgi-bin/ddnsenc.cgi in the D-Link DCS-2530L and DCS-2670L. An attacker can exploit this vulnerability to obtain the administrator password via the /config/getuser endpoint...

CVE-2020-25078

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure...

CVE-2020-25078: Undefined Security Weakness

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure...