CVE-2026-79396

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

CVE-2026-79393

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially execute arbitrary cod...

PT-2026-90046

Name of the Vulnerable Software and Affected Versions Xiongmai IP Camera XM530 versions prior to HMT.CM2005-v220608.1837 Description An improper authentication issue exists in the WS-Security wsse:UsernameToken verification routine of the Sofia IPC daemon. This occurs when an account's stored...

CVE-2026-79396

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

PT-2026-90047

Name of the Vulnerable Software and Affected Versions Xiongmai IP Camera XM530 versions prior to HMT.CM2005-v220608.1837 Description The device uses hardcoded default credentials that are stored in unencrypted plaintext within the bin/config.xml file and compiled into the Sofia executable. This...

EUVD-2026-76189

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

CVE-2026-79396

The Xiongmai IP Camera XM530 is vulnerable to unauthorized access due to the use of hardcoded default credentials in firmware versions HMT.CM2005-v220608.1837 and earlier. Static account credentials are stored in unencrypted plaintext within the bin/config.xml file and are also compiled into the ...

Honeywell IP Camera - check.cgi File Read

Reads arbitrary files via Honeywell IP camera /check.cgi?file= traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP camera check.cgi file parameter file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi cla...

Fullhan FH8626V100 Command Injection / Secret Disclosure

Fullhan FH8626V100 suffers from command injection, secret disclosure, and multiple other vulnerabilities. Exploit Title: Fullhan FH8626V100 - Multiple Vulnerabilities Date: 31-03-2026 Exploit Author: Amir Aliu Vendor Homepage: https://www.fullhan.com/ Software Link: N/A - OEM/whitelabel IP camera...

Fullhan FH8626V100 - Multiple Vulnerabilities

Exploit Title: Fullhan FH8626V100 - Multiple Vulnerabilities Date: 31-03-2026 Exploit Author: Amir Aliu Vendor Homepage: https://www.fullhan.com/ Software Link: N/A - OEM/whitelabel IP camera module, rebranded under numerous vendor/brand names Version: Firmware v201222.1007 Device Model AJL30PG08...

Honeywell IP-Camera HICC-1100PT Password Disclosure

Module exploits Honeywell IP-Camera HICC-1100PT Password Dislosure vulnerability. If target is vulnerable it is possible to read administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP-Camera HICC-1100PT Password Disclosure""" import re from kittysploit import from...

BEWARD N100 RCE

BEWARD N100 H.264 VGA IP Camera M2.1.6 Root Remote Code Execution.shodan search: WWW-Authenticate: Basic realm="N100 H.264 IP Camera"censys search: services.http.response.headers.wwwauthenticate:"N100 H.264 IP Camera"zoomeye search: "headers:"N100 H.264 IP Camera" !/usr/bin/env python3 -- coding:...

Netwave IP Camera Information Disclosure

This exploit will try to retrieve WPA password and ddns host name, Also it would try to read memory leak in order to find username and password !/usr/bin/env python3 -- coding: utf-8 -- """Netwave IP Camera Information Disclosure""" import re from kittysploit import from...

SIEMENS IP-Camera CCMS2025 Password Disclosure

Module exploits SIEMENS IP-Camera CCMS2025 Password Dislosure vulnerability. If target is vulnerable it is possible to read administrative credentials !/usr/bin/env python3 -- coding: utf-8 -- """SIEMENS IP-Camera CCMS2025 Password Disclosure""" import re from kittysploit import from...

JVC & Vanderbilt & Honeywell IP-Camera Path Traversal

Module exploits JVC IP-Camera VN-T216VPRU, Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR and Honeywell IP-Camera HICC-1100PT Path Traversal vulnerability. If target is vulnerable it is possible to read file from the filesystem. !/usr/bin/env python3 -- coding: utf-8 -- """JVC & Vanderbilt &...

CVE-2017-7921-Research-Toolkit GUI

CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...

Honeywell IP Camera - check.cgi LFI Detection

Detects Honeywell camera LFI via /check.cgi?file=../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP camera check.cgi LFI.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeywel...

Amcrest IP Camera - webCapsConfig Information Disclosure (CVE-2024-12984)

Amcrest IP cameras expose /webcaps/webCapsConfig without authentication, disclosing deviceType and WebVersion metadata. !/usr/bin/env python3 -- coding: utf-8 -- """Amcrest IP camera webCapsConfig information disclosure CVE-2024-12984.""" from kittysploit import from lib.protocols.http.httpclient...

Beward IP Camera - fileread Disclosure Detection

Detects unauthenticated file disclosure via /cgi-bin/operator/fileread?READ.filePath=/etc/passwd on Beward IP cameras. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera fileread arbitrary file disclosure.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Beward IP Camera - fileread File Read

Reads arbitrary files via /cgi-bin/operator/fileread?READ.filePath=. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera arbitrary file read via fileread.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi class...