CVE-2018-9995_dvr_credentials

Strumento mostra credenziali DVR root@kitploit: Titolo Exploit: "Gets DVR Credentials" CVE: CVE-2018-9995 Punteggio Base CVSS v3: 7.3 / 10 Stringa del Vettore CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autore dell'Exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

CVE-2018-9995_dvr_credentials

Strumento mostra credenziali DVR root@kitploit: Titolo exploit: "Ottiene credenziali DVR" CVE: CVE-2018-9995 Punteggio Base CVSS v3: 7.3 / 10 Stringa vettore CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autore exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

CVE-2024-7339

CVE-2024-7339: Уязвимость утечки информации в DVR-устройствах. Exploiter — инструмент для обнаружения и эксплуатации уязвимости CVE-2024-7339 утечка информации в DVR-устройствах. Затрагивает более 400 000+ устройств, которые раскрывают информацию, такую как модель продукта, версия ядра и т.д...

EUVD-2018-2747

Malware in sbrugna...

CVE-2025-34054 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection

An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgiquery. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence wa...

CVE-2025-34051 AVTECH DVR Devices Server-Side Request Forgery

A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgiquery endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests...

The vulnerability of the microprogrammed software of TBK DVR4104 and TBK DVR4216 devices lies in the lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands or cause malfunctions in the device.

The vulnerability of the microprogramming software of the TBK DVR4104 and TBK DVR4216 devices lies in the lack of measures to neutralize special elements used in the operating system’s processing of parameters mdb and mdc in the /device.rsp?opt=sys&cmd=SOSTREAMAX command. Exploiting this...

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721

The abuse of known security flaws to deploy bots on vulnerable systems is a widely recognized problem. Many automated bots constantly search the web for known vulnerabilities in servers and devices connected to the internet, especially those running popular services. These bots often carry Remote...

CVE-2018-10676

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

Exploit for CVE-2018-9995

CVE-2018-9995 - DVR Authentication Bypass This repository add...

PT-2023-11231 · Undefined · Undefined

Хакеры эксплуатируют уязвимость пятилетней давности, взламывая видеокамеры в банках Исследователи Fortinet FortiGuard Labs предупреждают, что злоумышленники активно эксплуатируют критическую неисправленную уязвимость, влияющую на устройства цифровой видеозаписи DVR TBK. Недостаток, отслеживаемый...

Exploit for CVE-2018-9995

CVE-2018-9995Batchscanningexp last 2018-8-9 A script fo...

CVE-2018-10676

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

Multiple DVR Information Disclosure Vulnerability

Multiple DVR devices are prone to a remote information- disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information, such as credentials, that may aid in further attacks from SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted...