EUVD-2024-26923

Malicious code in bioql PyPI...

EUVD-2025-19719

Malicious code in bioql PyPI...

EUVD-2025-18247

Malicious code in bioql PyPI...

EUVD-2023-32446

Malicious code in bioql PyPI...

EUVD-2025-19428

Malicious code in bioql PyPI...

EUVD-2022-32626

Malicious code in bioql PyPI...

EUVD-2024-26921

Malicious code in bioql PyPI...

EUVD-2023-32443

Malicious code in bioql PyPI...

EUVD-2024-26922

Malicious code in bioql PyPI...

EUVD-2023-59095

Malicious code in bioql PyPI...

EUVD-2022-32627

Malicious code in bioql PyPI...

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...

Exploit for CVE-2021-45678

It is an offensive tool for Hikvision IP Camera. The tool is a P...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite that originates from CSV injection and could lead to the execution of arbitrary commands...

PT-2025-35170

Name of the Vulnerable Software and Affected Versions: HikCentral Master Lite affected versions not specified Description: A CSV Injection issue exists in HikCentral Master Lite. This could allow an attacker to inject executable commands through malicious CSV data. Recommendations: At the moment,...

Hikvision HikCentral FocSign 安全漏洞

Hikvision HikCentral FocSign is a software from China's Hikvision Hikvision that integrates information dissemination, face time and attendance, and passenger flow statistics. A security vulnerability exists in Hikvision HikCentral FocSign that stems from an unreferenced service path and could le...

PT-2025-33881 · Undefined · Undefined

ParsedReport CompletenessMedium 19-08-2025 The emergence of MountBot, which hides its processes https://blog.nicter.jp/2025/08/mountbot 2025aug/ Report completeness: Medium Threats: Mountbot Rapperbot Socat tool Victims: Iot devices, Online game servers, Minecraft servers, Asus wifi routers,...

Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware

PoC misc PoC - Internet of InSecurity Things Well worth to read about these crappy insecurity things: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 --- 2021-10-19 All credit to WatchfulIP https://watchfulip.github.io/ https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py...

CVE-2025-34067

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

CVE-2025-34058

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php...