Lucene search
+L

237 matches found

Kitploit
Kitploit
added 2026/09/20 12:01 a.m.11 views

DahuaLoginBypass

DahuaLoginBypass Chrome 扩展程序,利用漏洞 CVE-2021-33044 在无需认证的情况下登录大华 IP 摄像头及 VTH/VTO(可视对讲)设备。 对于其他设备类型(NVR/DVR/XVR 等),存在 CVE-2021-33045,该漏洞无法通过普通 Web 浏览器利用。 这些漏洞很可能在 2021 年 9 月之后发布的固件中得到修复。 漏洞发现者鸣谢:bashis 安装 从 发布页面 下载 .zip 文件。 1. 将此 zip 包中的文件夹解压到某个位置。 2. 前往 Chrome 的扩展程序页面( chrome://extensions )。 3...

10CVSS8.1AI score0.99871EPSS
SaveExploits13References2
Kitploit
Kitploit
added 2026/09/19 10:07 a.m.10 views

CVE-2017-16778-Intercom-DTMF-Injection

Invoking DTMF Tones for Physical Access Grant on Fermax Lift Intercom System CVE-2017-16778 Special Mentions First and foremost, @dizijoyjoy for assisting on the demo set in order for a successful shoot. Special acknowledgement to Fermax for the prompt response to the security bug report on their...

4.6CVSS5.8AI score0.00555EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.392 views

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

9.8CVSS6.6AI score0.89138EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/15 11:24 p.m.9 views

CVE-2023-28810

CVE-2023-28810 Código de exploit para CVE-2023-28810. udp-config-changer.py Cambia la configuración en ejecución de un intercomunicador hikvision objetivo sin necesidad de autenticación alguna. udp-password-brute.py Intenta recuperar la contraseña de administrador del dispositivo mediante...

4.3CVSS5.7AI score0.10396EPSS
SaveExploits0
NVD
NVD
added 2026/09/11 8:16 a.m.10 views

CVE-2026-89174

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

8.7CVSS0.00375EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 8:16 a.m.10 views

CVE-2026-89175

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

6.9CVSS0.00319EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 8:16 a.m.10 views

CVE-2026-89173

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS0.00261EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 7:34 a.m.20 views

CVE-2026-89175

The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...

6.9CVSS5.8AI score0.00319EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 7:34 a.m.40 views

CVE-2026-89175 Kingdom Communication Associated|Smart Video Intercom System - Client-Side Authentication

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

6.9CVSS0.00319EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 7:34 a.m.14 views

EUVD-2026-76002

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

6.9CVSS5.8AI score0.00319EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 7:31 a.m.17 views

CVE-2026-89174

The Smart Video Intercom System developed by Kingdom Communication Associated suffers from a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts by performing a large number of login attempts, resulting in a high confidentiality impact ...

8.7CVSS5.8AI score0.00375EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 7:31 a.m.41 views

CVE-2026-89174 Kingdom Communication Associated|Smart Video Intercom System - Missing Burte-force Protection

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

8.7CVSS0.00375EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 7:31 a.m.17 views

EUVD-2026-76001

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

8.7CVSS5.8AI score0.00375EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 7:27 a.m.14 views

EUVD-2026-76000

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS5.7AI score0.00261EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 7:27 a.m.20 views

CVE-2026-89173

The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...

6.9CVSS5.7AI score0.00261EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 7:27 a.m.37 views

CVE-2026-89173 Kingdom Communication Associated|Smart Video Intercom System - Sensitive Data Exposure

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS0.00261EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 1:20 p.m.9 views

CVE-2026-85544

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards...

6.1CVSS0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 12:26 p.m.41 views

CVE-2026-85544

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards...

6.1CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 12:26 p.m.39 views

CVE-2026-85544

CVE-2026-85544 is an Improper Encryption Configuration vulnerability affecting some Hikvision Intercom Products . The flaw allows an attacker with physical access to forge M1 cards , leading to high confidentiality impact and low integrity impact (CVSS 3.1: 5.2 MEDIUM ). No specific product model...

6.1CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/10 12:26 p.m.16 views

CVE-2026-85544

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards...

6.1CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder