CamOver

CamOver CamOver es una herramienta de explotación de cámaras que permite revelar la contraseña de administrador de la cámara de red. Características Explota vulnerabilidades en los modelos de cámaras más populares como CCTV, GoAhead y Netwave. Optimizada para explotar múltiples cámaras a la vez...

zoneminder

ZoneMinder Toda la documentación de ZoneMinder está ahora disponible en línea en https://zoneminder.readthedocs.org Resumen ZoneMinder es un conjunto integrado de aplicaciones que proporcionan una solución de vigilancia completa, permitiendo la captura, análisis, grabación y monitoreo de cualquie...

CamXploit

Si encuentras útil este repositorio de GitHub, ¡por favor considera darle una estrella! ⭐️ CamXploit es una herramienta de reconocimiento de seguridad diseñada para ayudar a investigadores y defensores a evaluar si una dirección IP está alojando un servicio de cámara IP o CCTV potencialmente...

CVE-2018-9995

CVE-2018-9995 CVE-2018-9995 hackeo de cámara de vigilancia con vulnerabilidad...

CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Máquina Hackthebox: CCTV Aplicación: ZoneMinder Descripción Realizar múltiples inyecciones ciegas basadas en tiempo para el mismo carácter y seleccionar el resultado más frecuente reduce significativamente los errores y mejora la fiabilidad, aunque requiere mucho tiempo...

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Acceso Root y Exposición de Credenciales en Texto Plano en AZIOT Smart CCTV Resumen Se ha identificado una vulnerabilidad de control de acceso local CVE-2025-50777 en el firmware de la AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera Versión de...

CCTV

The Community Cryptography Test Vectors CCTV is an experiment, part of the Community Cryptography Specification Project, in test vector collection and reuse. All cryptography-related test vectors are welcome, and projects are encouraged to reuse them and contribute back any new vectors they...

sricam-gsoap2.8-dos-exploit

sricam-gsoap2.8-dos-exploit Sricam gSOAP2.8 DoS exploit proof of concept Proof of Concept code: SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 Thanks to the CVE Assignment Team for their help structuring the following: Description Sricam IP CCTV cameras are vulnerabl...

CVE-2026-54258 Cross-monitor event media authorization bypass in direct event media endpoints

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

CVE-2026-5386 KMW CCTV Security Cameras Unverified Password Change

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings...

CVE-2026-5386: Unverified Password Change

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings...

KMW CCTV Security Cameras

ADVISORY SUMMARY Successful exploitation of this vulnerability may grant full unauthorized access to camera feeds and settings. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

EUVD-2026-31124

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials...

CVE-2026-8598: Authentication Bypass Using an Alternate Path or Channel

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials...

PT-2026-20283

Name of the Vulnerable Software and Affected Versions Honeywell CCTV products versions prior to firmware updates addressing CVE-2026-1670 Honeywell I-HIB2PI-UL 2MP IP 6.1.22.1216 Honeywell SMB NDAA MVO-3, PTZ WDR 2MP 32M, 25M IPC WDR 2MP 32M PTZ v2.0 Description The affected products are vulnerab...

CVE-2021-47709 COMMAX Smart Home Ruvie CCTV Bridge DVR Service Config Write / DoS

COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through the setconf endpoint. Attackers can trigger a denial-of-service scenario by sending a malformed request to the setconf endpoint...

CVE-2021-47709

CVE-2021-47709 (COMMAX Smart Home System) : An unauthenticated attacker can change configuration and trigger denial-of-service by sending a malformed request to the setconf endpoint. The impact is a network-accessible DoS with high severity (CVSS 4.0 base 8.7, AV:N/AC:L/PR:N/UI:N/VI:N/VC:N/VA:H/S...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-343-01 Universal Boot Loader U-Boot ICSA-25-343-02 Festo LX Appliance ICSA-25-343-03 Multiple India-Base...

Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt

Threat actors with ties to Iran engaged in cyber warfare as part of efforts to facilitate and enhance physical, real-world attacks, a trend that Amazon has called cyber-enabled kinetic targeting. The development is a sign that the lines between state-sponsored cyber attacks and kinetic warfare ar...

ICAM365 CCTV Camera Multiple Models

RISK EVALUATION Successful exploitation of these vulnerabilities could result in unauthorized exposure of camera video streams and camera configuration data. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...