Basler IP Camera Default Credentials (HTTP)

The remote Basler IP Camera is using known default credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Basler IP Camera Remote Detection

Detects the installed version of Basler IP Camera. This script sends an HTTP GET request and tries to ensure the presence of Basler IP Camera. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2018-0662

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code...

CVE-2018-0662

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code...

Hardcoded credentials

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via...

Code injection

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code...

CVE-2018-0662

CVE-2018-0662 affects I-O DATA network camera products (TS-WRLP, TS-WRLA, TS-WRLP/E) with firmware version 1.09.04 or earlier. The root cause is Insufficient Verification of Data Authenticity (CWE-345); an attacker on the same network segment can add malicious files to the device and execute arbi...

CVE-2018-0661

The CVE-2018-0661 issue affects multiple I-O DATA network cameras (TS-WRLP, TS-WRLA, TS-WRLP/E) with firmware version 1.09.04 and earlier. A remote attacker on the same network segment can bypass access restrictions to add files in a specific directory, potentially enabling execution of arbitrary...

CVE-2018-0662

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code...

CVE-2018-0663

CVE-2018-0663 affects several I-O DATA network cameras: TS-WRLP (firmware ≤ 1.09.04), TS-WRLA (≤ 1.09.04), and TS-WRLP/E (≤ 1.09.04). The issue is use of hardcoded credentials, which may let a remote authenticated attacker execute arbitrary OS commands on the device via an unspecified vector. Aff...

PLANEX CS-W50HD Network Camera Remote Detection

Detects whether the target is PLANEX CS-W50HD Network Camera. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution

!/usr/bin/python import sys import requests import os import re import readline def usage: print "\nRPi Cam Web Interface Exploit\n" print "Usage: %s http://host/path/to/preview.php \n" % sys.argv0 print "Options: " print " -h, --help Show this help message and exit" print "" sys.exit0 def...

Argus Surveillance DVR 4.0.0.0 Privilege Escalation Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com...

Argus Surveillance DVR 4.0.0.0 Directory Traversal Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txt + ISR: Apparition Security Greetz: Greetz: indoushka | Eduardo | GGA Vendor...

Argus Surveillance DVR 4.0.0.0 SYSTEM Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com Product Argus...

Netwave IP Camera Detection

Detects whether the target is a Netwave IP camera and if so, tries to gather information about firmware and software version- SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Avigilon Camera Default Credentials (HTTP)

The remote Avigilon Camera is using known default credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Avigilon Camera Remote Detection

Detects the installed version of Avigilon Camera. This script sends an HTTP GET request and tries to ensure the presence of Avigilon Camera. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Netwave IP Camera Information Disclosure Vulnerability

Netwave IP cameras are prone to multiple Information Disclosure Vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-3918

An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings' remote servers, which incorrectly handle camera IDs for the 'sync'...