649 matches found
hikvision-unauthenticated-rce-cve-2021-36260
Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description An attacker can use this vulnerability to gain complete control of the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras, they...
CVE-2017-7921-EXP
CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system...
CVE-2017-7921
Hikvision Camera Lister & Snapshot Tool Standalone tool to list Hikvision cameras from a file and take a snapshot from each using valid credentials HTTP Basic or Digest auth or the CVE auth bypass. Intended to run on another host for testing. Features List cameras from a text file one host or...
CVE-2017-7921-rewrite
CVE-2017-7921-rewrite simple CVE-2017-7921 rewrite in python by me. for educational purposes only! kinda simple, i didnt include checks for stuff like ips, and advanced checks for the response and such. I tested it on a camera I am authorized to test it on within my local network and it seems to...
CVE-2017-7921
CVE-2017-7921 CVE-2017-7921 is a critical vulnerability CVSS score: 9.8 affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems from an improper authentication flaw that allows unauthenticated remote attackers to bypass login mechanisms and gain unauthorized acces...
hikvision_CVE-2017-7921_auth_bypass_config_decryptor
hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...
hikvision-exploiter
CVE-2017-7921., CVE-2021-36260 updated 21/01/2026...
AnonHik
AnonHik Python script to get image from Hikvision camera with CVE-2017-7921 vulnerability Demo:...
CVE-2021-36260
CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...
HikvisionExploiter_fixed
HikvisionExploiter Educational security tool for testing unsecured Hikvision exposures and checking CVE-2021-36260 in authorized environments. ⚠️ Legal and Ethical Warning This project should be used only on systems you own or have explicit permission to test. Scanning/exploitation without...
CVE-2017-7921
CVE-2017-7921 CVE-2017-7921-EXP Hikvision camera This tool is primarily intended for penetration testers with legal authorization and website administrators performing routine operations. Anyone must not use it for illegal purposes or profit-making, otherwise the consequences shall be borne by th...
hikvision_CVE-2017-7921_auth_bypass_config_decryptor
hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...
PoC
PoC misc PoC - Internet of InSecurity Things Well worth to read about these crappy insecurity things: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to WatchfulIP https://watchfulip.github.io/ https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Dah...
CVE-2026-85544
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...
CVE-2026-85544
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...
CVE-2026-85544
CVE-2026-85544 is an Improper Encryption Configuration vulnerability affecting some Hikvision Intercom Products . The flaw allows an attacker with physical access to forge M1 cards , leading to high confidentiality impact and low integrity impact (CVSS 3.1: 5.2 MEDIUM ). No specific product model...
EUVD-2026-75400
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...
Hikvision IP ping.php - Command Execution
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...
CVE-2026-0709
Hikvision Wireless AP – CVE-2026-0709 Authenticated RCE Tool This tool is a Python proof‑of‑concept to test Hikvision wireless access points for CVE‑2026‑0709 , an authenticated command injection vulnerability that can lead to remote code execution on affected devices. For security testing and...
