293 matches found
CVE-2025-46408
CVE-2025-46408 Improper Hostname Verification in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-297: Improper Validation of Certificate with Host Mismatch CVSS : 9.8 CRITICAL Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...
AVTECH DVR - Login Verification Code Bypass
AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...
AVTECH IP Camera - Command Injection
The endpoint /cgi-bin/supervisor/Factory.cgi is vulnerable to command injection via the action parameter, allowing remote code execution. id: CVE-2024-7029 info: name: AVTECH IP Camera - Command Injection author: DhiyaneshDK severity: high description: | The endpoint /cgi-bin/supervisor/Factory.c...
CVE-2024-7029
EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029 vulnerability found in AvTech devices, allowing Remote Code Execution RCE. This tool can scan for vulnerable devices and execute commands on them interactively. Features Vulnerability Detection : Check if AvTech devices are vulnerable to...
AvTech-PoCs
AvTech PoCs PoCs for CVE-2025-57199, CVE-2025-57200, CVE-2025-57201, CVE-2025-57202, and CVE-2025-57203. See blog post...
avtech-cve-2025-34065-analysis
This repository does not have a README...
CVE-2024-7029
PoC tool for exploiting CVE-2024-7029 in AvTech devices π€ README Translation English ΩΨ§Ψ±Ψ³Ϋ πΈ Screenshot π Introduction CVE-2024-7029 highlights a severe security issue in AVTech devices, where attackers can bypass authentication and execute arbitrary commands remotely. This vulnerability poses...
AVTECH - Machine.cgi Capability Disclosure Detection
Detects AVTECH unauthenticated information disclosure via /cgi-bin/nobody/Machine.cgi?action=getcapability. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH devices unauthenticated capability disclosure CVE-2016-15047 family.""" from kittysploit import from lib.protocols.http.httpclient import...
AVTECH Room Alert Login Panel - Detect
AVTECH Room Alert login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH Room Alert login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AVTECH Room Alert Login Panel -...
Avtech AVN801 Network Camera Admin Panel - Detect
An Avtech AVN801 Network Camera administration panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Avtech AVN801 Network Camera administration panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...
AVTECH DVR - SSRF Detection
AVTECH DVR device, Search.cgi can be accessed directly. Search.cgi is responsible for searching and accessing cameras in the local network. Search.cgi provides the cgiquery function. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH DVR device, Search.""" from kittysploit import from...
AVTECH Video Surveillance Product - Authentication Bypass Detection
AVTECH Video Surveillance Products password disclosure through /cgi-bin/user/Config.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH Video Surveillance Products password disclosure through /cgi-bin/user/Config.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...
AVTECH AVC798HA DVR - Information Exposure Detection
AVTECH AVC798HA DVR is susceptible to information exposure. CGI scripts in the /cgi-bin/nobody directory can be accessed without authentication. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...
AVTECH Video Surveillance Product - Unauthenticated File Download Detection
AVTECH video surveillance products unauthenticated file download from web root through /cgi-bin/cgibox, Since the .cab string is verified by the strstr method, the file download can be realized by adding ?.cab at the end of the file name. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH video...
CVE-2026-56808
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...
CVE-2026-56808
The CVE-2026-56808 entry concerns the DGM3103SCT device from AVTECH Security Corporation. The vulnerability is described as an OS command injection that can allow arbitrary command execution with root privileges by a user who can log in to the deviceβs web management console. The available connec...
CVE-2026-56808
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...
EUVD-2026-40265
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...
CVE-2026-56808
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...
AVTECH Room Alert Cleartext Storage of Sensitive Information (CVE-2024-33470)
When an administrator authenticates with the device and browses the settings pages, the SMTP password is loaded from the device and presented in the DOM in plaintext. When settings are saved, the SMTP credentials are sent back to the device in plain text. This allows an actor with administrative...