EUVD-2022-32627

Malicious code in bioql PyPI...

EUVD-2023-59095

Malicious code in bioql PyPI...

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...

Exploit for CVE-2021-45678

It is an offensive tool for Hikvision IP Camera. The tool is a P...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite that originates from CSV injection and could lead to the execution of arbitrary commands...

Hikvision HikCentral FocSign 安全漏洞

Hikvision HikCentral FocSign is a software from China's Hikvision Hikvision that integrates information dissemination, face time and attendance, and passenger flow statistics. A security vulnerability exists in Hikvision HikCentral FocSign that stems from an unreferenced service path and could le...

PT-2025-35170

Name of the Vulnerable Software and Affected Versions: HikCentral Master Lite affected versions not specified Description: A CSV Injection issue exists in HikCentral Master Lite. This could allow an attacker to inject executable commands through malicious CSV data. Recommendations: At the moment,...

PT-2025-33881 · Undefined · Undefined

ParsedReport CompletenessMedium 19-08-2025 The emergence of MountBot, which hides its processes https://blog.nicter.jp/2025/08/mountbot 2025aug/ Report completeness: Medium Threats: Mountbot Rapperbot Socat tool Victims: Iot devices, Online game servers, Minecraft servers, Asus wifi routers,...

Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware

PoC misc PoC - Internet of InSecurity Things Well worth to read about these crappy insecurity things: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 --- 2021-10-19 All credit to WatchfulIP https://watchfulip.github.io/ https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py...

CVE-2025-34067

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

CVE-2025-34058

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php...

CVE-2025-34067

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

CVE-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

CVE-2025-34067

CVE-2025-34067 affects Hikvision Integrated Security Management Platform (applyCT component). The flaw is deserialization of untrusted input in /bic/ssoService/v1/applyCT via vulnerable Fastjson auto-type, enabling remote code execution by loading a malicious Java class referenced through an LDAP...

CVE-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

Hikvision HikCentral 安全漏洞

Hikvision HikCentral is a security management software from Hikvision China. A security vulnerability exists in Hikvision HikCentral that stems from a deserialization issue that could lead to remote code execution...

VulnCheck KEV: CVE-2025-34067

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

CVE-2025-34058

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php...

CVE-2025-34058 Hikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php...

CVE-2025-34058

Affected software: Hikvision Streaming Media Management Server version 2.3.5. The vulnerability stems from default credentials allowing remote authentication, after which an attacker can trigger an arbitrary file read via directory traversal in the /systemLog/downFile.php endpoint through the fil...