Geutebruck Remote Command Execution Exploit

This Metasploit module bypasses the HTTP basic authentication used to access the /uapi-cgi/ folder and exploits multiple authenticated arbitrary command execution vulnerabilities within the parameters of various pages on Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and...

Compro Technology IP Camera - ' index_MJpeg.cgi' Stream Disclosure

Exploit Title: Compro Technology IP Camera - ' indexMJpeg.cgi' Stream Disclosure Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40381 Has an unauthorized acce...

Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated)

Exploit Title: Compro Technology IP Camera - RTSP stream disclosure Unauthenticated Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40379 Some devices have...

Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure

Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40382 There is an...

UDP Technology IP 摄像头认证绕过 RCE 漏洞（CVE-2021-33543、CVE-2021-33544）

...

A week in security (July 26 – August 1)

Last week on Malwarebytes Labs: OSX.XLoader hides little except its main purpose: What we learned in the installation process. The Clubhouse database “breach” is likely a non-breach. Here’s why. Kaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach. UDP Technolo...

Denver IP Camera SHO-110 Snapshot Disclosure

Exploit Title: Denver IP Camera SHO-110 - Unauthenticated Snapshot Date: 28 July 2021 Exploit Author: Ivan Nikolsky enty8080 Vendor Homepage: https://denver.eu/products/smart-home-security/denver-sho-110/c-1024/c-1243/p-3826 Version: Denver SHO-110 all firmware versions Tested on: Denver SHO-110...

Denver IP Camera SHO-110 - Unauthenticated Snapshot

Exploit Title: Denver IP Camera SHO-110 - Unauthenticated Snapshot Date: 28 July 2021 Exploit Author: Ivan Nikolsky enty8080 Vendor Homepage: https://denver.eu/products/smart-home-security/denver-sho-110/c-1024/c-1243/p-3826 Version: Denver SHO-110 all firmware versions Tested on: Denver SHO-110...

UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root

Researchers at RandoriSec have found serious vulnerabilities in the firmware provided by UDP Technology to Geutebrück and many other IP camera vendors. According to the researchers the firmware supplier UDP Technology fails to respond to their reports despite numerous mails and LinkedIn messages...

Insteon HD IP Camera Remote Code Execution (CVE-2018-11560; CVE-2018-12640)

A remote code execution vulnerability exists in Insteon HD IP Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco 7000 Series IP Camera Memory Leak Vulnerability (CNVD-2021-57458)

The Cisco 7000 Series IP cameras are 5 megapixel, high definition, outdoor fixed dome cameras in vandal resistant enclosures with pan/tilt/zoom functionality.The Cisco 7000 Series IP camera implementation of Link Layer Discovery Protocol LLDP in firmware versions prior to 2.12.4 is vulnerable to ...

Cisco 7000 Series IP Camera Memory Leak Vulnerability (CNVD-2021-57459)

The Cisco 7000 Series IP cameras are 5 megapixel, high definition, outdoor fixed dome cameras in vandal resistant enclosures with pan/tilt/zoom functionality.The Cisco 7000 Series IP camera implementation of Link Layer Discovery Protocol LLDP in firmware versions prior to 2.12.4 is vulnerable to ...

Cisco 7000 Series IP Camera Memory Leak Vulnerability

The Cisco 7000 Series IP cameras are 5 megapixel, high definition, outdoor fixed dome cameras in vandal resistant enclosures with pan/tilt/zoom functionality.The Cisco 7000 Series IP camera implementation of Link Layer Discovery Protocol LLDP in firmware versions prior to 2.12.4 is vulnerable to ...

Weak Password Vulnerability in IP Camera of Zhejiang Dahua Technology Co.

IP Camera is a network camera management software. A weak password vulnerability exists in IP Camera of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

PT-2021-20027

Name of the Vulnerable Software and Affected Versions Dahua ipc-hum7xxx firmware Dahua ipc-hx3xxx firmware Dahua ipc-hx5xxx firmware Dahua sd1a1 firmware Dahua sd22 firmware Dahua sd49 firmware Dahua sd50 firmware Dahua sd52c firmware Dahua sd6al firmware Dahua tpc-bf1241 firmware Dahua tpc-bf222...

PT-2021-20028

Name of the Vulnerable Software and Affected Versions Dahua ipc-hum7xxx firmware Dahua ipc-hx3xxx firmware Dahua ipc-hx5xxx firmware Dahua nvr-1xxx firmware Dahua nvr-2xxx firmware Dahua nvr-4xxx firmware Dahua nvr-5xxx firmware Dahua nvr-6xx firmware Dahua vth-542xh firmware Dahua vto-65xxx...

CVE-2021-23852

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...

CVE-2021-23852

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...

Unauthorized Access Vulnerability in Cohu IP Camera Control

Cohu offers the broadest portfolio of equipment and services for back-end semiconductor manufacturing, including one-stop test and handling equipment, thermal subsystems, test contacts, visual inspection and MEMS test solutions. An unauthorized access vulnerability exists in Cohu IP Camera Contro...

Logic flaw vulnerability in IP Camera of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the IP Camera of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...