CVE-2024-48644

CVE-2024-48644 September, 2024 CVE Details CVE: https://vulners.com/cve/CVE-2024-48644 NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-48644 Tenable: https://www.tenable.com/cve/CVE-2024-48644 Account Enumeration and Guessable User Account Summary Accounts enumeration vulnerability in the Login...

CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 The live feed MJPEG can be streamed via an exposed HTTP channel using VLC network stream. This vulnerability...

CVE-2017-8225

CVE-2017-8225 Install Python3 apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installation: git clone https://github.com/kienquoc102/CVE-2017-8225.git Code Exploit: cd CVE-2017-8225 python3 scanip.py Your File Text .txt Example: python3...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

HD-Network Realtime Monitoring System 2.0 - Local File Inclusion

Instances of HD-Network Realtime Monitoring System version 2.0 are vulnerable to a Local File Inclusion vulnerability which allows remote unauthenticated attackers to view confidential information. id: CVE-2021-45043 info: name: HD-Network Realtime Monitoring System 2.0 - Local File Inclusion...

VelotiSmart Wifi - Directory Traversal

VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80. id: CVE-2018-14064 info: name: VelotiSmart Wifi - Directory Traversal author: 0xAkoko severity: critical description: VelotiSmart WiFi B-380 camera...

Camtron CMNC-200 IP Camera - Directory Traversal

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system. id: CVE-2010-4231 info: name: Camtron CMNC-200 IP Camera - Directory Traversal author: daffainfo severity: high description: The CMNC-200 IP...

r4ven

Si encuentras útil este repositorio de GitHub, ¡considera darle una estrella! ⭐️ ▶️ Ver Video - ¡Cómo Usarlo! Este proyecto es una herramienta de investigación y concientización sobre seguridad diseñada para demostrar cómo los navegadores web modernos pueden exponer datos de ubicación, acceso a la...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

CVE-2017-7921-rewrite

CVE-2017-7921-rewrite simple CVE-2017-7921 rewrite in python by me. for educational purposes only! kinda simple, i didnt include checks for stuff like ips, and advanced checks for the response and such. I tested it on a camera I am authorized to test it on within my local network and it seems to...

CVE-2024-41312.

CVE-2024-41312. InstantCMS - Stored Cross Site Scripting XSS Affected Version: InstantCMS 2.16.3 Steps to Reproduce: 1. Log in to https://demo.instantcms.io as an demo user. 2. Visit https://demo.instantcms.io/photos/upload. 3. Upload the image with the embedded payload test in the Camera Model...

CVE-2025-60787

CVE-2025-60787 — motionEye Authenticated RCE Authenticated command injection PoC for CVE-2025-60787. motionEye v0.43.1b4 and earlier write user-controlled camera configuration values such as imagefilename into Motion configuration without sufficient sanitization, allowing command execution when t...

CVE-2025-67158

CVE-2025-67158 — Revotech I6032W-FHW Summary The Revotech I6032W-FHW IP camera firmware contains an authentication bypass vulnerability in the /cgi-bin/jvsweb.cgi endpoint. The device does not validate the user.name and user.digest fields included in JSON-based API requests, allowing...

AnonHik

AnonHik Python script to get image from Hikvision camera with CVE-2017-7921 vulnerability Demo: Alt Text...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

CVE-2025-9983

CVE-2025-9983 - GALAYOU G2 RTSP EXPLOIT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python POC for CVE-2025-9983 , an...

cve-2018-9995

cve-2018-9995 exploit camera with vuln cve-2018-9995 Novo CeNova QSee Pulnix XVR 5 in 1 title: "XVR Login" Securus, - Security. Never Compromise !! - Night OWL DVR Login HVR Login MDVR Login...

CP-PLUS-EZ-P21-CVE-2026-65893-65894

🔐 Security Analysis of the CP PLUS EZ-P21 IP Camera CVE-2026-65893 CVE-2026-65894 Arbitrary Code Execution & Improper Authentication – CP PLUS EZ-P21 IP Camera Overview This repository documents two security vulnerabilities identified in the CP PLUS EZ-P21 IP Camera , an IP-based surveillance...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...