CVE-2025-9983

CVE-2025-9983 - GALAYOU G2 RTSP 漏洞利用 /!\ 免责声明： 此脚本按“原样”提供，仅供教育目的。强烈建议用户谨慎使用，并在法律和道德允许的范围内操作。 描述 针对 CVE-2025-9983 的 Python POC，该漏洞是 GALAYOU G2 安防摄像头 中的 RTSP 凭据绕过漏洞，允许未经身份验证的攻击者无需有效凭据即可访问实时视频流。 该工具通过扫描可访问的 RTSP 流并验证身份验证凭据是否可以被完全绕过。 功能 流发现 ：自动发现常见的 RTSP 流端点。 凭据绕过 ：通过测试无凭据的流来验证身份验证绕过。 证据捕获...

📄 GALAYOU G2 IP Camera Authentication Bypass

A critical authentication bypass vulnerability exists in the RTSP service of the GALAYOU G2 IP camera. The device exposes multiple RTSP stream endpoints that can be accessed without valid credentials, even when authentication is enabled...

CVE-2025-9983

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only...

CVE-2025-9983 Lack of Authentication for RTSP stream

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only...

GALAYOU G2 访问控制错误漏洞

The GALAYOU G2 is a surveillance camera from GALAYOU USA. An access control error vulnerability exists in GALAYOU G2 version 11.100001.01.28, which stems from RTSP streams that do not properly implement credential validation, which could lead to unauthorized access to video streams...

PT-2025-38711

Name of the Vulnerable Software and Affected Versions GALAYOU G2 cameras version 11.100001.01.28 Description GALAYOU G2 cameras stream video output via RTSP streams. By default, these streams are protected by randomly generated credentials, but these credentials are not required to access the...