CVE-2024-7029

AvTech 장치의 CVE-2024-7029 취약점 악용을 위한 PoC 도구 🎤 README 번역 English فارسی 📸 스크린샷 💎 소개 CVE-2024-7029는 AVTech 장치에서 발견된 심각한 보안 문제로, 공격자가 인증을 우회하고 원격으로 임의의 명령을 실행할 수 있습니다. 이 취약점은 영향을 받는 네트워크의 무결성과 보안에 심각한 위험을 초래합니다. 💀 취약점 개요 CVE-2024-7029는 AVTech 장치의 치명적인 보안 결함으로, 인증 우회를 통한 무단 액세스를 허용하여 잠재적으로 원격 코드 실행으로 이...

CVE-2025-46408

CVE-2025-46408 EagleEyes Lite 안드로이드 애플리케이션의 부적절한 호스트명 검증 1. 개요 이름 : EagleEyesLite 버전 : 2.0.0 공급업체 : AVTECH CWE : CWE-297: 호스트 불일치 시 인증서의 부적절한 검증 CVSS : 9.8 치명적 벡터 문자열 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 2. 요약 EagleEyes Lite 버전 2.0.0은 HTTPS 통신 중...

CVE-2024-7029

EN GenAvTechRCEExploit CVE-2024-7029 취약점에 대한 PoC 익스플로잇으로, AvTech 장치에서 원격 코드 실행RCE을 가능하게 합니다. 이 도구는 취약한 장치를 스캔하고 상호 작용 방식으로 명령을 실행할 수 있습니다. 기능 취약점 탐지 : AvTech 장치가 RCE에 취약한지 확인합니다. 대화형 셸 : 대화형 셸을 통해 대상 장치에서 명령을 실행합니다. 멀티스레드 스캐닝 : 멀티스레딩을 사용하여 여러 대상을 동시에 스캔합니다. 페이로드 실행 : 특수 제작된 페이로드를 전송하여 원격으로 명령을...

AVTECH IP Camera - Command Injection

The endpoint /cgi-bin/supervisor/Factory.cgi is vulnerable to command injection via the action parameter, allowing remote code execution. id: CVE-2024-7029 info: name: AVTECH IP Camera - Command Injection author: DhiyaneshDK severity: high description: | The endpoint /cgi-bin/supervisor/Factory.c...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

AvTech-PoCs

AvTech PoCs CVE-2025-57199, CVE-2025-57200, CVE-2025-57201, CVE-2025-57202 및 CVE-2025-57203에 대한 PoCs입니다. 블로그 포스트를 참조하세요...

avtech-cve-2025-34065-analysis

이 저장소에는 README가 없습니다...

CVE-2026-56808

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...

EUVD-2026-40265

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...

CVE-2026-56808

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...

CVE-2026-56808

The CVE-2026-56808 entry concerns the DGM3103SCT device from AVTECH Security Corporation. The vulnerability is described as an OS command injection that can allow arbitrary command execution with root privileges by a user who can log in to the device’s web management console. The available connec...

CVE-2026-56808

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...

AVTECH Room Alert Cleartext Transmission of Sensitive Information (CVE-2024-33471)

An individual with administrative access can change the mail server host within the device. An attacker who has obtained administrative access can update the mail server to an attacker controller IP. When the device attempts to authenticate to the mail server, it will pass the previously configur...

AVTECH Room Alert Cleartext Storage of Sensitive Information (CVE-2024-33470)

When an administrator authenticates with the device and browses the settings pages, the SMTP password is loaded from the device and presented in the DOM in plaintext. When settings are saved, the SMTP credentials are sent back to the device in plain text. This allows an actor with administrative...

The vulnerability of microprogrammed IP cameras, digital and network video recorders from AvtechAVTECH, arises from the failure to take measures to neutralize special elements, allowing violators to execute arbitrary commands.

The vulnerability of microprogrammed IP cameras, digital and network video recorders from AvtechAVTECH is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogrammed software-based cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogramming software-based IP cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogrammed software-based cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogramming software-based IP cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...