1184 matches found
CVE-2018-11654
Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...
CVE-2018-11653
CVE-2018-11653 affects Netwave IP cameras. The root cause is an information-disclosure in the //etc/RT2870STA.dat file accessible via HTTP on port 8000, enabling an unauthenticated attacker to exfiltrate sensitive network configuration data (SSID and passwords). Public sources in the connected do...
CVE-2018-11654
An information disclosure vulnerability exists in Netwave IP cameras within the get_status.cgi file. This flaw allows an unauthenticated attacker to exfiltrate sensitive information from the device via HTTP on port 8000 . While the vulnerability is documented as a WillNotFix in some security scan...
PT-2018-10733
Name of the Vulnerable Software and Affected Versions Netwave IP camera affected versions not specified Description The issue allows an unauthenticated attacker to disclose sensitive information about the network configuration, including the network SSID and password, via HTTP on port 8000 by...
PT-2018-10734
Name of the Vulnerable Software and Affected Versions Netwave IP camera affected versions not specified Description The issue allows an unauthenticated attacker to exfiltrate sensitive information from the device through information disclosure in the Netwave IP camera at the "get status.cgi" API...
CVE-2018-11654: Exposure of Sensitive Information to an Unauthorized Actor
Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...
CVE-2018-11653: Exposure of Sensitive Information to an Unauthorized Actor
Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...
Hikvision IP Camera 5.4.0 - User Enumeration Exploit
Exploit for hardware platform in category remote exploits Exploit title: Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Author: Alfie Website: https://www.hikvision.com/en/ Software: Hikvision Camera Versions: DS-2CD2xx2F-I Series: V5.2.0 build 140721 to V5.4.0 build 160530 DS-2CD2xx0F-I...
Hikvision IP Camera 5.4.0 - User Enumeration (Metasploit)
Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Exploit title: Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Author: Alfie Date: 2018-08-21 Website: https://www.hikvision.com/en/ Software: Hikvision Camera Versions: DS-2CD2xx2F-I Series: V5.2.0 build 140721 to V5.4.0 build 16053...
Hikvision IP Camera 5.4.0 - User Enumeration (Metasploit)
Exploit title: Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Author: Alfie Date: 2018-08-21 Website: https://www.hikvision.com/en/ Software: Hikvision Camera Versions: DS-2CD2xx2F-I Series: V5.2.0 build 140721 to V5.4.0 build 160530 DS-2CD2xx0F-I Series: V5.2.0 build 140721 to V5.4.0...
NUUO NVRmini upgrade_handle.php Remote Command Execution
This exploits a vulnerability in the web application of NUUO NVRmini IP camera, which can be done by triggering the writeuploaddir command in the upgradehandle.php file. Module Options msf use exploit/multi/http/nuuo/nvrminiupgraderce msf undefinednvrminiupgraderce show actions ...actions... msf...
Trendnet Internet Camera Detection
Detection of Trendnet Internet Camera devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Stack overflow
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...
CVE-2017-3223
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...
EUVD-2017-12344
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...
CVE-2017-3223 Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...
CVE-2017-3223
CVE-2017-3223 affects Dahua IP cameras via the Sonia web interface (/usr/bin/sonia). Older firmware (pre V2.400.0000.14.R.20170713) does not validate input length for the password field, enabling a remote, unauthenticated attacker to send crafted POST requests that may trigger out-of-bounds memor...
CVE-2017-3223: Stack-based Buffer Overflow
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...
Sony IPELA E Series Camera measurementBitrateExec command injection vulnerability
Summary An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability. Tested...