70 matches found
CVE-2025-45620
问题详情 摄像头型号 PTC310UV2，运行固件版本 0.1.0000.59。该漏洞存在于用于访问摄像头的 Web 界面中。该漏洞是在渗透测试期间发现的，因此 PoC 截图中的某些信息已做打码处理。 描述 本披露包含在 AVer 固件登录 Web 界面中识别出的两个漏洞。需要说明的是，我对你们的产品并不十分熟悉，因此某些术语可能使用得不够准确。 与 CVE-2025-45619 相比，这一发现更为全面，不过它主要涉及客户端身份验证。 检查 Web...
CVE-2025-45619
问题详情 相机型号 PTC310UV2，运行固件版本 0.1.0000.59。该漏洞存在于用于访问相机的 Web 界面中。该漏洞是在一次渗透测试中发现的，因此 PoC 截图中的某些信息已被隐去。 描述 本披露包含在 AVer 固件登录 Web 界面中发现的两种漏洞。需要注意的是，我对该公司的任何产品都不太熟悉，因此某些术语可能使用不当。CVE-2025-45619 是本次调查中发现的第一个漏洞。第二个漏洞可在此处找到：https://github.com/weedl/CVE-2025-45620/tree/main CVE-2025-45619...
CVE-2026-40624
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially crafted web request...
CVE-2026-40624
CVE-2026-40624 affects AVer PTC cameras: PTC500S, PTC115, PTC500+, and PTC115+. The advisory states that improper input validation in these devices may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially crafted web request. The CVSS metrics indicate a CRI...
CVE-2026-40624
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially crafted web request...
CVE-2026-40624 AVer PTC cameras Files or Directories Accessible to External Parties
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially crafted web request...
AVer PTC cameras
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and/or...
PT-2026-50820
Name of the Vulnerable Software and Affected Versions AVer PTC500S affected versions not specified AVer PTC115 affected versions not specified AVer PTC500+ affected versions not specified AVer PTC115+ affected versions not specified Description Improper input validation in these networked...
CVE-2026-26461
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
CVE-2026-26461
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
CVE-2026-26461
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
CVE-2026-26461
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
Aver PTC320UV2 命令注入漏洞
The Aver PTC320UV2 is an auto-tracking camera device from Aver Corporation. A command injection vulnerability exists in the Aver PTC320UV2 version 0.1.0000.65, which stems from a command injection vulnerability in the Web management interface that could allow an unauthenticated attacker to execut...
CVE-2026-26461
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
CVE-2026-26461
This CVE concerns a Command Injection in the web management interface of Aver PTC320UV2 0.1.0000.65. An unauthenticated attacker can execute arbitrary commands via a crafted web request, indicating impact on confidentiality, integrity (partial), and limited availability per the CVSS vector. The v...
PT-2026-36529
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
EUVD-2026-26701
A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request...
EUVD-2016-7457
Malware in sbrugna...