CVE-2021-4045

Título del exploit: TP-LINK Tapo c200 1.1.15 - RCE Vendedor: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Versión: 1.1.15 y anteriores CVE: CVE-2021-4045 Botnet C2 cargable y massexploit Análisis de la vulnerabilidad:...

Ingram

简体中文 | English 简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视、dlink等常见设备 安装 请在 Linux 或 Mac 系统使用，确保安装了3.8及以上版本的Python，尽量不要使用3.11，因为对许多包的兼容不是很好 克隆该仓库: root@kitploit: git clone https://github.com/jorhelp/Ingram.git 进入项目目录，创建一个虚拟环境，并激活该环境： root@kitploit: cd Ingram pip3 install virtualenv python3 -m virtualenv ven...

CamOver

CamOver CamOver 是一款摄像头利用工具，能够泄露网络摄像头的管理员密码。 特点 利用最流行的摄像头型号中的漏洞，例如 CCTV、GoAhead 和 Netwave。 优化以从列表中同时利用多个摄像头，支持线程。 简单的命令行界面和 API 使用。 安装 root@kitploit: pip3 install git+https://github.com/EntySec/CamOver 基本使用 要使用 CamOver，只需在终端中键入 camover。 root@kitploit: usage: camover -h -t -o OUTPUT -i INPUT -a...

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

NUUO Camera <=20250203 - OS Command Injection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. id: CVE-2025-1338 info: name: NUUO Camera =20250203 - OS Command Injection author: Ark...

SV3C HD Camera L Series - Open Redirect

SV3C HD Camera L Series 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B contains an open redirect vulnerability. It does not perform origin checks on URLs in the camera's web interface, which can be leveraged to send a user to an unexpected endpoint. An attacker can possibly obtai...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

HD-Network Realtime Monitoring System 2.0 - Local File Inclusion

Instances of HD-Network Realtime Monitoring System version 2.0 are vulnerable to a Local File Inclusion vulnerability which allows remote unauthenticated attackers to view confidential information. id: CVE-2021-45043 info: name: HD-Network Realtime Monitoring System 2.0 - Local File Inclusion...

Camtron CMNC-200 IP Camera - Directory Traversal

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system. id: CVE-2010-4231 info: name: Camtron CMNC-200 IP Camera - Directory Traversal author: daffainfo severity: high description: The CMNC-200 IP...

Genie Access WIP3BVAF IP Camera - Local File Inclusion

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.X are vulnerable to local file inclusion via the web interface, as demonstrated by reading /etc/shadow. id: CVE-2019-7315 info: name: Genie Access WIP3BVAF IP Camera - Local File Inclusion author: 0xAkoko severity: hi...

Reolink E1 Zoom Camera <=3.0.0.716 - Private Key Disclosure

Reolink E1 Zoom Camera versions 3.0.0.716 and below suffer from a private key RSA disclosure vulnerability. id: CVE-2021-40149 info: name: Reolink E1 Zoom Camera =3.0.0.716 - Private Key Disclosure author: For3stCo1d severity: medium description: | Reolink E1 Zoom Camera versions 3.0.0.716 and...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

VelotiSmart Wifi - Directory Traversal

VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80. id: CVE-2018-14064 info: name: VelotiSmart Wifi - Directory Traversal author: 0xAkoko severity: critical description: VelotiSmart WiFi B-380 camera...

Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusion

Cisco Linksys WVC54GCA 1.00R22/1.00R24 is susceptible to local file inclusion in adm/file.cgi because it allows remote attackers to read arbitrary files via a %2e. encoded dot dot or an absolute pathname in the nextfile parameter. id: CVE-2009-1558 info: name: Cisco Linksys WVC54GCA 1.00R22/1.00R...

365cam-stream

365Cam Stream 将你的廉价WiFi摄像头直接串流到电脑上——无需App、无需云端、无需账号。 从AliExpress / Amazon / Temu买了一个小型WiFi摄像头，却只能通过手机App使用？这个工具可以让你在本地网络的浏览器中直接查看摄像头画面。你的视频永远不会离开家。 适用于使用以下App的摄像头： 365Cam | IPC365 | iMiniCam | iMiniCam Pro | WiFi Camera | Mini Camera | A9 Camera | Outdoor Camera | Spy Camera Viewer | P2P Camera |...

CamPhish

CamPhish 通过发送链接，从目标的手机前置摄像头或PC网络摄像头获取摄像头快照。 什么是CamPhish？ CamPhish是一种技术，可以从目标的手机前置摄像头或PC网络摄像头获取摄像头快照。CamPhish在内置PHP服务器上托管虚假网站，并使用ngrok和CloudFlare Tunnel生成一个链接，我们将该链接发送给目标，可以在互联网上使用。网站请求摄像头权限，如果目标允许，该工具将获取目标设备的摄像头快照。 已添加GPS位置捕获功能。 功能特性 在此工具中，我添加了两个自动网页模板，用于在网页上吸引目标，以获取更多摄像头照片 节日祝福 直播YouTube电视 在线会议测...

Ruse

Ruse 基于移动设备摄像头的应用，旨在修改照片，使其对人类保持可用性，同时让人脸识别系统无法使用。 安装 1 简单方法：等待并从相应的应用商店下载应用。 2 通过 Xcode 下载并运行 iOS 应用（详细步骤参见“开发设置”部分） 使用示例 应用开发为基于摄像头的应用，允许在拍摄新照片或从相机胶卷中选择现有照片时对脸部进行修改，目标是保持这些照片对社交媒体和人类观赏的可用性，同时让人脸识别系统难以准确有效地识别它们。 这是基于先前研究的多种方法实现的。由于移动设备和 TensorFlow Lite...

netwave-dosvulnerability

Netwave IP Camera 服务器存在未经身份验证的拒绝服务漏洞，可通过向任何固件发送一个巨大的POST请求触发。 CVE| 描述 ---|--- CVE-2018-6479| 未认证的远程拒绝服务漏洞 CVSS| 评分| 详情 ---|---|--- 3| 7.3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:X/RL:W/RC:X 0. 引言： 在一次物联网安全研究中，在不同IP摄像头供应商的产品中发现了一些漏洞。Netwave IP Camera...

Pantheon

Pantheon 关于 Pantheon Pantheon 是一款 GUI 应用程序，允许用户显示来自不同国家的网络摄像头信息，并为未受保护的摄像头提供集成的实时视频流。 功能 Pantheon 允许用户执行一个 API 爬虫。最初的功能设计是不依赖任何 API（例如 Insecam），但 Google 的服务条款不断干扰原始的抓取机制。 安装 1. git clone https://github.com/josh0xA/Pantheon.git 2. cd Pantheon 3. pip3 install -r requirements.txt 运行：python3...