CVE-2025-1338

CVE-2025-1338 Questo repository contiene uno script proof-of-concept per l'exploit di CVE-2025-1338 1.Introduzione alla NUUO-Camera La NUUO camera è un videoregistratore di rete NVR prodotto dalla società NUUO nella provincia di Taiwan, in Cina. È ampiamente utilizzata in molti settori come vendi...

QVIS NVR/DVR - Remote Code Execution

QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization. id: CVE-2021-41419 info: name: QVIS NVR/DVR - Remote Code Execution author: me9187 severity: critical description: | QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd D'abord, obtenez le mot de passe hashé MD5 du compte 'admin'. Envoyez : GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windo...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Сначала получите SessionID гостевого пользователя. SessionID можно найти в любом HTTP-запросе. Например: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With: XMLHttpRequest...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 authentifizierte RCE Exploit-Titel: Frigate NVR = 0.16.3 - authentifizierte Remote-Code- Ausführung Datum: 2026-02-05 Exploit-Autor: jduardo2704 Anbieter-Homepage: https://frigate.video/ Software-Link: https://github.com/blakeblackshear/frigate Version: = 0.16...

Hikvision-City-Hunter

Il tool definitivo del 2025 per ricognizione e sfruttamento a livello cittadino per telecamere IP Hikvision, DVR e NVR Output console live • DVR/NVR evidenziati in viola • Telecamere in verde • Download automatico snapshot • Filtro honeypot...

tiandy-research

tiandy-research इस रिपॉज़िटरी में Tiandy के IPC/NVR फ़र्मवेयर ये डिवाइस OMNY के रूप में भी बेचे जाते हैं पर मेरे अगस्त 2020 के शोध के परिणाम हैं। यह "शोध" संपूर्ण नहीं था, लेकिन मुझे व्यवस्थापक पासवर्ड दूरस्थ रूप से पुनर्प्राप्त करने, टेलनेट सक्षम करने और रूट पासवर्ड बदलने के कई तरीके मिले। यह कह...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 Exploit de RCE Cego CVE-2026-25643 PoC 📜 Descrição Este exploit em Python tem como alvo uma vulnerabilidade crítica de manipulação de configuração nas versões do Frigate NVR até 0.16.3 tanto nos caminhos autenticados quanto não autenticados. Ao injetar um stream go2rtc...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Simulation des Dahua Authentication-Bypass-PoC CVE-2021-33044 Übersicht Dahua-IP-Kameras sind IoT-Geräte, die häufig in Sicherheitsüberwachungssystemen eingesetzt werden. Da sie oft in internen Netzwerken oder über das Internet erreichbar sind, können Sicherheitslücken bei IP-Kameras schwerwiegen...

CVE-2019-9653

CVE-2019-9653 التاريخ الإفصاح: 03/11/2019 آخر تحديث: 03/15/2019 الملخص NUUO Inc. هي شركة تقدم حلول مراقبة تعتمد على الفيديو. لديها العديد من منتجات مسجلات الشبكة NVR لعملاء مختلفين باحتياجات متنوعة. هذه المسجلات هي أنظمة تسجيل فيديو مدمجة تعمل بنظام Linux ويمكنها إدارة عدة كاميرات. في الوقت الحال...

frigate

Frigate NVR™ - Echtzeit-Objekterkennung für IP-Kameras English | 简体中文 Ein vollständiger und lokaler NVR, entwickelt für Home Assistant mit KI-Objekterkennung. Verwendet OpenCV und Tensorflow, um Echtzeit-Objekterkennung lokal für IP-Kameras durchzuführen. Die Verwendung einer GPU oder eines...

cve-2020-15956

cve-2020-15956 ACTi NVR 2.3 Standard/Professional Server e ACTi NVR3 Standard/Professional Server consentono a utenti remoti non autenticati di effettuare un denial of service. Per sfruttare questa vulnerabilità è sufficiente inviare un payload dell'header di autorizzazione malformato di almeno 7...

CVE-2026-6824

A stored cross-site scripting XSS vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on the device backend. When administrators o...

CVE-2026-6824

A stored cross-site scripting XSS vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on the device backend. When administrators o...

glib2 security update

2.80.4-13 - Fix CVE-2025-14087 and CVE-2025-14512 2.80.4-12 - Fix NVR 2.80.4-11 - Add patch for CVE-2025-13601...

CVE-2026-34005

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

CVE-2026-34005

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

CVE-2026-33469

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. In version 0.17.0, an authenticated non-admin user can retrieve the full raw Frigate configuration through /api/config/raw. This exposes sensitive values that are intentionally redacted from /api/config,...

CVE-2026-33470 Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. In version 0.17.0, a low-privilege authenticated user restricted to one camera can access snapshots from other cameras. This is possible through a chain of two authorization problems: /api/timeline return...

CVE-2026-33470 Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. In version 0.17.0, a low-privilege authenticated user restricted to one camera can access snapshots from other cameras. This is possible through a chain of two authorization problems: /api/timeline return...