276 matches found
DahuaLoginBypass
DahuaLoginBypass إضافة كروم تستخدم الثغرة CVE-2021-33044 لتسجيل الدخول إلى كاميرات IP من داهوا وأجهزة VTH/VTO الاتصال الداخلي بالفيديو دون مصادقة. بالنسبة لأنواع الأجهزة الأخرى NVR/DVR/XVR، إلخ، توجد الثغرة CVE-2021-33045 التي لا يمكن استغلالها باستخدام متصفح ويب عادي. من المحتمل أن تكون هذه...
CVE-2017-16778-Intercom-DTMF-Injection
استدعاء نغمات DTMF لمنح الوصول الفعلي على نظام الاتصال الداخلي لمصعد Fermax CVE-2017-16778 إشارات خاصة أولاً وقبل كل شيء، @dizijoyjoy للمساعدة في إعداد العرض التوضيحي لتصوير ناجح. تقدير خاص لشركة Fermax للاستجابة السريعة لتقرير الثغرة الأمنية في منتجها. لقد تواصلوا وتنسقوا عن كثب، وقدموا تحديثات...
CVE-2023-28810
CVE-2023-28810 كود استغلال الثغرة CVE-2023-28810. udp-config-changer.py تغيير الإعدادات الجارية لجهاز الاتصال الداخلي من Hikvision الهدف دون الحاجة إلى أي مصادقة. udp-password-brute.py محاولة استعادة كلمة مرور المسؤول للجهاز عبر التخمين بالقوة الغاشمة قائمة الكلمات غير مرفقة. SIP-ghost-caller.py...
Hikvision IP ping.php - Command Execution
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...
CVE-2026-89175
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
CVE-2026-89173
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-89174
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
EUVD-2026-76002
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
CVE-2026-89175 Kingdom Communication Associated|Smart Video Intercom System - Client-Side Authentication
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
CVE-2026-89175
The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...
CVE-2026-89174 Kingdom Communication Associated|Smart Video Intercom System - Missing Burte-force Protection
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
CVE-2026-89174
The Smart Video Intercom System developed by Kingdom Communication Associated suffers from a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts by performing a large number of login attempts, resulting in a high confidentiality impact ...
EUVD-2026-76001
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
CVE-2026-89174 Kingdom Communication Associated|Smart Video Intercom System - Missing Burte-force Protection
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
EUVD-2026-76000
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-89173 Kingdom Communication Associated|Smart Video Intercom System - Sensitive Data Exposure
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-89173 Kingdom Communication Associated|Smart Video Intercom System - Sensitive Data Exposure
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-89173
The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...
CVE-2026-89175: Client-Side Enforcement of Server-Side Security
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
PT-2026-89798
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...