Beward IP Camera - servetest NTP Command Injection (CVE-2025-34042)

Exploits Beward camera command injection in ServerName of /cgi-bin/operator/servetest?cmd=ntp. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera servetest NTP RCE — opens execute session.""" import re from urllib.parse import quote from kittysploi...

Hikvision IP Camera - webLanguage Command Injection (CVE-2021-36260)

Exploits CVE-2021-36260 by injecting OS commands into PUT /SDK/webLanguage, writing stdout under webLib/ and reading it back. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision IP camera unauthenticated RCE CVE-2021-36260 — opens execute session.""" impor...

PTZOptics Camera - Unauth RCE via NTP Config (CVE-2024-8957)

Chains CVE-2024-8956 missing auth on param.cgi with CVE-2024-8957 OS command injection in ntpaddr. Delivers a reverse CMD payload via POST /cgi-bin/param.cgi?postnetworkotherconf and waits for a shell session. !/usr/bin/env python3 -- coding: utf-8 -- """PTZOptics / VHD camera unauthenticated RCE...

Camera Driver Qualcomm System DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to the writing beyond the buffer boundaries when processing parameters such as the input batch size and the number of buffer planes. Exploiting this vulnerability can allow an attacker to cause a...

Camera Driver Qualcomm DoS Execution Code

The vulnerability of the Camera Driver microprogramming software in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted commands containing...

Camera Driver Qualcomm DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted JPEG commands...

Camera Driver Qualcomm System DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries during the processing of Flash commands. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

Impact For serial-port and media camera / microphone permission checks made from an iframe, the requestingOrigin passed to session.setPermissionCheckHandler was the top-level frame's origin rather than the requesting frame's. Origin-based handler logic could therefore grant a cross-origin iframe...

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

SUSE CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-61514

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

CVE-2026-61515

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...

CVE-2026-61514 Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

EUVD-2026-52690

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

CVE-2026-61514 Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

CVE-2026-61514

CVE-2026-61514 affects Puwell IP Camera firmware 2.x to 4.x, where an authentication bypass allows unauthenticated remote access by sending protocol-conforming packets to TCP port 23456. The issue stems from an unvalidated Session field in the proprietary control protocol header, enabling attacke...

CVE-2026-61514

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

CVE-2026-61515 Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...

CVE-2026-61515

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...

CVE-2026-61515

The CVE concerns Puwell IP Camera firmware versions 2.x–4.x with an unauthenticated command injection via the DebugShell interface on TCP port 34567. The root cause is lack of authentication and insufficient input sanitization in the binary protocol service, allowing remote execution of arbitrary...