CVE-2017-7921-EXP

CVE-2017-7921 익스플로잇 Hikvision 장치에서 부적절한 인증 문제가 발견되었습니다. ​ 부적절한 인증 취약점은 애플리케이션이 사용자를 적절하게 또는 올바르게 인증하지 않을 때 발생합니다. ​ 이로 인해 악의적인 사용자가 시스템에서 자신의 권한을 상승시키고 민감한 정보에 접근할 수 있습니다. ​ https://seclists.org/fulldisclosure/2017/Sep/23 ​ 취약점 상세: ​ ---------------------- ​ 모든 사용자와 해당 역할 목록 검색: ​...

CVE-2025-60787

CVE-2025-60787 — motionEye 인증된 원격 코드 실행 RCE CVE-2025-60787에 대한 인증된 명령 주입 PoC입니다. motionEye v0.43.1b4 및 이전 버전은 imagefilename과 같은 사용자 제어 카메라 구성 값을 충분한 정화 없이 Motion 구성에 기록하여, 해당 값이 처리될 때 명령 실행을 허용합니다. 승인된 테스트 및 연구용으로만 사용하세요. 소유하지 않거나 테스트에 대한 명시적 허가가 없는 시스템에는 사용하지 마십시오. 기능 root@kitploit: Signed API...

PYSEC-2026-2666 motionEye's World-Readable Configuration File Exposes Admin Password Hash

Security Advisory: World-Readable Configuration File Exposes Admin Password Hash in motionEye Summary motionEye v0.43.1 and prior versions create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contai...

CVE-2026-32315 motionEye: World-Readable Configuration File Exposes Admin Password Hash

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...

PT-2026-51431

Name of the Vulnerable Software and Affected Versions motionEye versions prior to 0.44.0 Description Configuration files /etc/motioneye/motion.conf and camera-.conf are created with 644 permissions, making them readable by any local user on the system. The motion.conf file contains sensitive data...

CVE-2025-13607

A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL...

EUVD-2025-202452

A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL...

CVE-2025-13607

A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL...

CVE-2025-13607 D-Link CCTV camera model DCS-F5614-L1 Missing Authentication for Critical Function

A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL...

CVE-2025-13607

CVE-2025-13607 affects D-Link CCTV camera model DCS-F5614-L1 and related entries, describing unauthenticated access to camera configuration data (including account credentials) via a vulnerable URL. Connected sources consistently state missing authentication as the root cause; several enrichments...

PT-2025-50362

Name of the Vulnerable Software and Affected Versions CCTV affected versions not specified Description A malicious actor can access camera configuration information, including account credentials, without authentication by accessing a vulnerable URL. This flaw potentially risks video feed hijack...

D-Link DCS-F5614-L1 安全漏洞

The D-Link DCS-F5614-L1 is a network camera from China Youxun D-Link. A security vulnerability exists in the D-Link DCS-F5614-L1 that originates from unauthenticated access to camera configuration information, including account credentials, when accessing a specific URL...

CVE-2025-64770

The affected products allow unauthenticated access to Open Network Video Interface Forum ONVIF services, which may allow an attacker unauthorized access to camera configuration information...

CVE-2025-62674

The affected product allows unauthenticated access to Real Time Streaming Protocol RTSP services, which may allow an attacker unauthorized access to camera configuration information...

EUVD-2025-198340

The affected products allow unauthenticated access to Open Network Video Interface Forum ONVIF services, which may allow an attacker unauthorized access to camera configuration information...

EUVD-2025-198339

The affected product allows unauthenticated access to Real Time Streaming Protocol RTSP services, which may allow an attacker unauthorized access to camera configuration information...

CVE-2025-64770

The affected products allow unauthenticated access to Open Network Video Interface Forum ONVIF services, which may allow an attacker unauthorized access to camera configuration information...

CVE-2025-62674

The affected product allows unauthenticated access to Real Time Streaming Protocol RTSP services, which may allow an attacker unauthorized access to camera configuration information...

CVE-2025-62674 Missing Authentication for RTSP in iCam Cameras

The affected product allows unauthenticated access to Real Time Streaming Protocol RTSP services, which may allow an attacker unauthorized access to camera configuration information...

CVE-2025-62674

The CVE-2025-62674 issue concerns iCam365 P201 and iCam365 QC021 network cameras. The vulnerability allows unauthenticated access to RTSP services, which may enable an attacker to retrieve camera configuration information. The information in the connected documents indicates this affects RTSP/ONV...