Genie Access WIP3BVAF IP Camera - Local File Inclusion Detection

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.X are vulnerable to local file inclusion via the web interface, as demonstrated by reading /etc/shadow. !/usr/bin/env python3 -- coding: utf-8 -- """Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera device...

Detect Selea Targa IP OCR-ANPR Camera

Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure flaw !/usr/bin/env python3 -- coding: utf-8 -- """Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Str.""" from...

Panasonic Network Camera Management System - Detect

Panasonic Network Camera Management System page with live views was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Panasonic Network Camera Management System page with live views was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Sony IPELA Engine IP Camera - Hardcoded Account Detection

Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials.""" from kittysploit import from...

Network Camera FTP Service - Detect

Network Camera FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Network Camera FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Network...

Camtron CMNC-200 IP Camera - Directory Traversal Detection

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system. !/usr/bin/env python3 -- coding: utf-8 -- """The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal...

SV3C HD Camera L Series - Open Redirect Detection

SV3C HD Camera L Series 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B contains an open redirect vulnerability. It does not perform origin checks on URLs in the camera's web interface, which can be leveraged to send a user to an unexpected endpoint. An attacker can possibly obtai...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure Detection

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. !/usr/bin/env python3 -- coding: utf-8 ...

Frigate NVR - API Exposure Detection

Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal network configuration, and MQTT credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal...

SecuritySpy Camera Panel - Detect

SecuritySpy Camera panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecuritySpy Camera panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecuritySpy Camera Panel - Detect',...

Selea Targa IP OCR-ANPR Camera - Local File Inclusion Detection

Selea Targa IP OCR-ANPR camera suffers from an unauthenticated local file inclusion vulnerability because input passed through the Download Archive in Storage page using getfile.php script is not properly verified before being used to download files. This can be exploited to disclose the contents...

NoVus IP Login Panel - Detect

NoVus IP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NoVus IP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NoVus IP Login Panel - Detect', 'description': 'NoVus...

MOBOTIX Guest Camera Live View - Detect

MOBOTIX Guest Camera live view was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MOBOTIX Guest Camera live view was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MOBOTIX Guest Camera Live View -...

Avtech AVN801 Network Camera Admin Panel - Detect

An Avtech AVN801 Network Camera administration panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Avtech AVN801 Network Camera administration panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Reolink E1 Zoom Camera <=3.0.0.716 - Private Key Disclosure Detection

Reolink E1 Zoom Camera versions 3.0.0.716 and below suffer from a private key RSA disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Reolink E1 Zoom Camera versions 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure Detection

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI...

AXIS Network Camera Live View - Detect

AXIS Network Camera live view was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AXIS Network Camera live view was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info =...

CVE-2026-12989

A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...

EUVD-2026-49179

A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...

CVE-2026-12989

CVE-2026-12989 describes a lack of authentication in Ghost Robotics' Vision 60 mobile app (APK v5.5.0). An unauthenticated attacker on the device’s internal Wi‑Fi can access the web administration interface and HTTP API, bypassing authorization to view real‑time camera feeds, control robot moveme...