netwave-dosvulnerability

Netwave IP Camera server vulnerable to unauthenticated Denial of Service via one single huge POST request on any firmware. CVE| Description ---|--- CVE-2018-6479| Unauthenticated remote Denial of Service vulnerability CVSS| Score| Details ---|---|--- 3| 7.3|...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

libmsm_cameraconfig_exploit

Original code is written by @tewilove http://pastebin.com/8BPCDc4i...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability A security flaw identified as CVE-2017-7921, which affects various models of Hikvision cameras. The vulnerability was discovered in the DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Seri...

androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

CVE-2021-4045

Exploit Title: TP-LINK Tapo c200 1.1.15 - RCE Vendor: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below CVE: CVE-2021-4045 Loadable C2 botnet & massexploit Write up of vuln: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce...

dot

Инструментарий для наступательных дипфейков Deepfake Offensive Toolkit dot также известный как Deepfake Offensive Toolkit позволяет создавать управляемые дипфейки в реальном времени и внедрять их в виртуальные камеры. dot создан для проведения пентестов систем, например, проверки личности и...

CVE-2023-26818

Disclaimer This exploit has been created solely for the purposes of research and for the development of effective defensive techniques. It is not intended to be used for any malicious or unauthorized activities. The author and the owner of the script disclaim any responsibility or liability for a...

hm-surf

HM-Surf 평가 도구 일반적인 macOS 브라우저의 CVE-2024-44133 취약성 여부를 평가합니다. 또한 스크린샷을 찍고 위치 정보 추출과 함께 다운로드하는 HTML을 포함합니다. 사용법 - 평가 도구 모든 일반적인 macOS 브라우저에서 CVE-2024-44133을 평가하는 평가 도구를 실행하려면 다음을 실행하세요: root@kitploit: python3 -m pip install -r ./requirements.txt ./hm-surf-eval.py 실행 시 도구는 모든 일반적인 macOS 브라우저의 TCC 우회...

CVE-2025-65817

CVE-2025-65817 필드| 값 ---|--- 제목| 취약점 보고서: LSC Smart Connect Camera 날짜| 2024-02-15 설명| SD 카드 업데이트 훅을 악용하여 LSC Smart Connect 카메라에서 원격 셸을 생성. 태그| iot, 취약점, cve 펌웨어| 1.14.13 LSC Smart Connect Camera 취약점 보고서 발견된 취약점은 startapp.sh의 업데이트 시스템, 특히 SD 카드 마운트와 update.nor.sh 파일을 이용하는 것입니다. 구성 변수 root@kitploit...

CVE-2024-48644

CVE-2024-48644 September, 2024 CVE Details CVE: https://vulners.com/cve/CVE-2024-48644 NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-48644 Tenable: https://www.tenable.com/cve/CVE-2024-48644 Account Enumeration and Guessable User Account Summary Accounts enumeration vulnerability in the Login...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...

CVE-2025-60787

CVE-2025-60787 — motionEye Authenticated RCE Authenticated command injection PoC for CVE-2025-60787. motionEye v0.43.1b4 and earlier write user-controlled camera configuration values such as imagefilename into Motion configuration without sufficient sanitization, allowing command execution when t...

CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 The live feed MJPEG can be streamed via an exposed HTTP channel using VLC network stream. This vulnerability...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Моделирование эксплуатации обхода аутентификации Dahua PoC CVE-2021-33044 Обзор IP-камеры Dahua — это IoT-устройства, широко используемые в системах видеонаблюдения. Поскольку они часто развертываются в локальных сетях или доступны через Интернет, уязвимости безопасности в IP-камерах могут серьез...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

HD-Network Realtime Monitoring System 2.0 - Local File Inclusion

Instances of HD-Network Realtime Monitoring System version 2.0 are vulnerable to a Local File Inclusion vulnerability which allows remote unauthenticated attackers to view confidential information. id: CVE-2021-45043 info: name: HD-Network Realtime Monitoring System 2.0 - Local File Inclusion...

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI...

SV3C HD Camera L Series - Open Redirect

SV3C HD Camera L Series 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B contains an open redirect vulnerability. It does not perform origin checks on URLs in the camera's web interface, which can be leveraged to send a user to an unexpected endpoint. An attacker can possibly obtai...