CVE-2026-25643

Exploit de RCE Ciega en Frigate NVR ≤ 0.16.3 CVE-2026-25643 PoC 📜 Descripción Este exploit en Python aprovecha una vulnerabilidad crítica de manipulación de configuración en las versiones de Frigate NVR hasta la 0.16.3 tanto en rutas autenticadas como no autenticadas. Al inyectar una transmisión...

Hikvision-City-Hunter

La herramienta definitiva de reconocimiento y explotación a nivel de ciudad para 2025 para cámaras IP Hikvision, DVRs y NVRs Salida en vivo de consola • DVRs/NVRs resaltados en púrpura • Cámaras en verde • Descarga automática de instantáneas • Filtrado de honeypots...

CVE-2019-9653

CVE-2019-9653 日期 Disclosure: 03/11/2019 Last updated: 03/15/2019 摘要 NUUO Inc.是一家提供視訊監控解決方案的公司。他們有許多NVR（網路視訊錄影機）產品，可滿足不同客戶的各種要求。這些NVR為Linux的嵌入式視訊錄製系統，可以管理多個攝影機。目前，它們在全世界被許多公共機構、公司、銀行及個人等使用。這些NVR系統的Web界面包含許多嚴重漏洞可遭未經身份驗證的攻擊者利用。我們從中發現了一些易受攻擊的PHP腳本缺乏認證機制和輸入保護，因此它們可在NUUO設備上被利用以root權限執行遠端程式碼。 影響範圍 韌體版本...

frigate

Frigate NVR™ - 一个具有实时目标检测的本地 NVR English | 简体中文 一个完整的本地网络视频录像机（NVR），专为Home Assistant设计，具备 AI 目标/物体检测功能。使用 OpenCV 和 TensorFlow 在本地为 IP 摄像头执行实时物体检测。 强烈推荐使用 GPU 或者 AI 加速器（例如Google Coral 加速器 或者 Hailo等）。它们的运行效率远远高于现在的顶级 CPU，并且功耗也极低。 通过自定义组件与 Home Assistant 紧密集成 设计上通过仅在必要时和必要地点寻找目标，最大限度地减少资源使用并最大化性能...

QVIS NVR/DVR - Remote Code Execution

QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization. id: CVE-2021-41419 info: name: QVIS NVR/DVR - Remote Code Execution author: me9187 severity: critical description: | QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Simulación de explotación de Dahua Authentication Bypass PoC CVE-2021-33044 Resumen Las cámaras IP Dahua son dispositivos IoT ampliamente utilizados en sistemas de vigilancia de seguridad. Debido a que se implementan con frecuencia en redes internas o se accede desde Internet, las vulnerabilidade...

CVE-2025-1338

CVE-2025-1338 Este repositorio contiene un script de exploit de prueba de concepto para CVE-2025-1338 1.Introducción a la cámara NUUO La cámara NUUO es un grabador de video en red NVR fabricado por la empresa NUUO en la provincia de Taiwán, China. Se utiliza ampliamente en muchos campos como el...

tiandy-research

tiandy-research Este repositorio contiene los resultados de mi investigación de agosto de 2020 sobre el firmware de IPC/NVR de Tiandy estos dispositivos también se venden como OMNY. Esta "investigación" no fue exhaustiva, pero encontré múltiples métodos para recuperar la contraseña del...

cve-2020-15956

cve-2020-15956 Los servidores ACTi NVR 2.3 Standard/Professional y ACTi NVR3 Standard/Professional permiten a atacantes remotos no autenticados realizar una denegación de servicio. Para explotar esta vulnerabilidad, basta con enviar una carga útil de cabecera de autorización malformada de al meno...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec 有限公司 首先，获取访客用户的 SessionID。 我们可以从任意 HTTP 请求中找到 SessionID。例如： POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With: XMLHttpRequest X-Request: JSON Content-Type:...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd 首先，获取 'admin' 账户的 MD5 哈希密码。 发送： GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:55.0 Gecko/20100101...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 RCE autenticado Título del Exploit: Frigate NVR = 0.16.3 - Ejecución remota de código autenticada Fecha: 2026-02-05 Autor del Exploit: jduardo2704 Página del proveedor: https://frigate.video/ Enlace del software: https://github.com/blakeblackshear/frigate...

EUVD-2026-84985

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...

EUVD-2026-84984

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...

EUVD-2026-84983

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

EUVD-2026-84982

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...

CVE-2026-92930

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...

CVE-2026-94367

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...

CVE-2026-92929

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

CVE-2026-92928

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...