ACTi ACM-5611 Video Camera RCE

Module exploits ACTi ACM-5611 Video Camera Remote Command Execution Exploit !/usr/bin/env python3 -- coding: utf-8 -- """ACTi ACM-5611 Video Camera RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler import Handler class ModuleExploit,...

EUVD-2026-60550

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...

CVE-2026-51977: Use of Hard-coded Cryptographic Key

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...

CVE-2026-51977

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...

CVE-2026-74437

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock if uvcstatusstop is called from asyncctrl.work If a UVC camera has an asynchronous control, uvcstatusstop may be called from asyncctrl.work: uvcctrlstatuseventwork uvcctrlstatusevent uvcctrlclearhand...

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

CVE-2017-7921-Research-Toolkit GUI

CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...

Beward IP Camera - servetest NTP RCE Detection (CVE-2025-34042)

Detects Beward camera command injection via /cgi-bin/operator/servetest?cmd=ntp&ServerName=pool.ntp.org|id|| !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera servetest NTP command injection CVE-2025-34042 / Feb 2019.""" import re from kittysploit import from...

Beward IP Camera - fileread Disclosure Detection

Detects unauthenticated file disclosure via /cgi-bin/operator/fileread?READ.filePath=/etc/passwd on Beward IP cameras. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera fileread arbitrary file disclosure.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Amcrest IP Camera - webCapsConfig Information Disclosure (CVE-2024-12984)

Amcrest IP cameras expose /webcaps/webCapsConfig without authentication, disclosing deviceType and WebVersion metadata. !/usr/bin/env python3 -- coding: utf-8 -- """Amcrest IP camera webCapsConfig information disclosure CVE-2024-12984.""" from kittysploit import from lib.protocols.http.httpclient...

PTZOptics Camera - Unauth System Config / Password Leak (CVE-2024-8956)

PTZOptics cameras expose /cgi-bin/param.cgi?getsystemconf without authentication, leaking userpasswd hashes CVE-2024-8956. Presence also indicates the related OS command injection CVE-2024-8957. !/usr/bin/env python3 -- coding: utf-8 -- """PTZOptics camera insufficient auth leaking password hash...

VideoIQ Camera - Path Traversal Detection

Detects VideoIQ LFI via /../../etc/passwd style paths. !/usr/bin/env python3 -- coding: utf-8 -- """VideoIQ camera path traversal LFI.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VideoIQ Camera - Path...

NUUO Camera - Unauthenticated OS Command Injection (CVE-2025-1338)

NUUO camera firmware up to 20250203 is vulnerable to unauthenticated OS command injection via the log parameter of /handleconfig.php. Command output is returned in the HTTP response. Opens an execute session for interactive command execution. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO came...

Hikvision IP Camera - webLanguage RCE Detection (CVE-2021-36260)

Hikvision IP cameras accept unauthenticated PUT /SDK/webLanguage with a command injection in the XML field, writing output under webLib CVE-2021-36260 / HSRC-202109-01, CISA KEV. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision IP camera command injection via /SDK/webLanguage...

Beward IP Camera - fileread File Read

Reads arbitrary files via /cgi-bin/operator/fileread?READ.filePath=. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera arbitrary file read via fileread.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi class...

PTZOptics Camera - Unauth RCE via NTP Config (CVE-2024-8957)

Chains CVE-2024-8956 missing auth on param.cgi with CVE-2024-8957 OS command injection in ntpaddr. Delivers a reverse CMD payload via POST /cgi-bin/param.cgi?postnetworkotherconf and waits for a shell session. !/usr/bin/env python3 -- coding: utf-8 -- """PTZOptics / VHD camera unauthenticated RCE...

Honeywell IP Camera - check.cgi LFI Detection

Detects Honeywell camera LFI via /check.cgi?file=../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP camera check.cgi LFI.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeywel...

Beward IP Camera - servetest NTP Command Injection (CVE-2025-34042)

Exploits Beward camera command injection in ServerName of /cgi-bin/operator/servetest?cmd=ntp. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera servetest NTP RCE — opens execute session.""" import re from urllib.parse import quote from kittysploi...

Hikvision IP Camera - webLanguage Command Injection (CVE-2021-36260)

Exploits CVE-2021-36260 by injecting OS commands into PUT /SDK/webLanguage, writing stdout under webLib/ and reading it back. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision IP camera unauthenticated RCE CVE-2021-36260 — opens execute session.""" impor...

Camera Driver Qualcomm DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted JPEG commands...