avtech-cve-2025-34065-analysis

This repository does not have a README...

CVE-2026-34065

creationtimestamp| type| source ---|---|--- 2026-04-22 20:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk4d2satw72k 2026-04-22 21:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4fctfsa326 2026-04-22 21:21:31+00:00| seen|...

CVE-2025-34065

creationtimestamp| type| source ---|---|--- 2025-07-01 15:08:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20050...

CVE-2025-34065 AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls...

CVE-2025-34065

The CVE-2025-34065 vulnerability affects AVTECH IP cameras, DVRs, and NVRs (streamd web server). The issue is an authentication bypass where the strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls. Affected systems are AVTECH de...

CVE-2024-34065

creationtimestamp| type| source ---|---|--- 2024-07-21 19:21:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10863 2024-07-24 21:31:44+00:00| published-proof-of-concept| Telegram/mZP-9PUZDeEAKB5uXUiNKVRoCByHBZ1AuIyU9Vlxy8kidb0g 2024-07-24 22:29:42+00:00|...

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +17 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.10 and more Source cves: CVE-2024-34065 Source advisory: OSV:GHSA-WRVH-RCMR-9QFC...

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +17 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.10 and more Source cves: CVE-2024-34065 Source advisory: GHSA-WRVH-RCMR-9QFC...

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +17 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.10 and more Source cves: CVE-2024-34065 Source advisory: MEND:CVE-2024-34065...

CVE-2022-34065

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:17+00:00| seen| https://t.me/cibsecurity/45123...

CVE-2022-34065

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...