130 matches found
IIITA-IoT-Security-Research
IIIT 알라바드 – IoT 보안 연구 인턴십 개요 이 저장소는 Indian Institute of Information Technology, AllahabadIIIT Allahabad의 암호화·네트워크 보안CNS 연구실 에서 수행한 연구 인턴십 기간의 작업을 보여줍니다. 인턴십 기간 동안 저는 IoT 보안 , 펌웨어 역공학 , 취약점 연구 를 수행했으며, 임베디드 IP 카메라 펌웨어의 보안 평가에 중점을 두었습니다. 이 연구는 보안 취약점의 책임 있는 공개Responsible Disclosure로 이어졌으며, 해당 취약점은...
VIVOTEK Camera Firmware
ADVISORY SUMMARY Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...
CVE-2026-85496: Generation of Predictable Numbers or Identifiers
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...
jdbhttpd 0.1.0 Path Traversal / File Disclosure
jdbhttpd version 0.1.0 suffers from path traversal and file disclosure vulnerabilities. https://packetstorm.news/download/230538...
PT-2026-63340
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data...
EUVD-2026-25957
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
EUVD-2026-25935
Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...
CVE-2026-28747
A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed...
Exploit for CVE-2024-51347
CVE-2024-51347: Unauthenticated Remote Code Execution in LSC I...
CVE-2021-41506
Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI351850H10LS39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205,...
CVE-2024-39350
A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC50...
CVE-2017-20214 FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system...
EUVD-2025-204762
Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical...
Xiongmai XM530 安全漏洞
Xiongmai XM530 is a video surveillance camera from the Chinese company Xiongmai. A security vulnerability exists in the Xiongmai XM530 IP cameras Firmware version V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06, which stems from an authentication bypass, and could lead to unauthorized, remote...
CVE-2025-56438
An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card...
EUVD-2017-15402
Malware in sbrugna...
EUVD-2021-6576
Malicious code in bioql PyPI...
EUVD-2023-51897
Malicious code in bioql PyPI...