9197 matches found
DAHUA_AUTH-BYPASS-CVE-2021-33044
Dahua Authentication Bypass Exploit Simulation PoC CVE-2021-33044 Overview Dahua IP cameras are IoT devices commonly used in security surveillance systems. Due to frequent deployment in internal networks or Internet access, security vulnerabilities in IP cameras can severely impact privacy and...
Iot_Hacking_Camera_0day
IotHackingCamera0day Iot Camera 0day AHD DVR ADN-448 is prone to unauth buffer overflow over the http interface. Simple browse to web server inferface and enter a stupid ammount of data to username and password , and see how the camera reboots. Please see the video for confirmation : Happy IoT-...
ip-camera-research
IP Camera Research - Fullhan FH8626V100 AJL30PG0803 Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC model AJL30PG0803, resulting in six assigned CVEs covering unauthenticated API access, plaintext credential disclosure, and full unauthenticated device compromise via ...
CVE-2023-51127
CVE-2023-51127 FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic...
CVE-2025-1338
CVE-2025-1338 This repository contains a proof-of-concept exploit script for CVE-2025-1338 1.Introduction to NUUO-Camera NUUO camera is a network video recorder NVR produced by NUUO Company in Taiwan Province, China. It is widely used in many fields such as retail, transportation, education,...
CVE-2026-66804
CVE-2026-66804: Cross Device Virtual Camera EoP Independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed the submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...
Tool_Exploit_Password_Camera_CVE-2018-9995
ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Search for vulnerable devices on Google with the keyword: intitle:"DVR login". 2. Try to access any device: We see the device requires a Username and Password to access. 3. Check if we can retrieve the...
Tool_Camera_Exploit_Netwave_CVE-2018-6479
ToolCameraExploitNetwaveCVE-2018-6479 Vulnerability allowing denial of service on Netwave Camera CVE-2018-6479. CVE-2018-6479: https://vulners.com/cve/CVE-2018-6479 a. Access the camera: b. Proceed to use the tool to exploit the denial of service vulnerability on the device: Enter the device's IP...
CVE-2021-36260
Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras,...
NoCameraSound
NoCameraSound iOS 14.0-15.7.1 & 16.0-16.1.2 This should no longer be used. https://ichitaso.com/iphone/how-to-silence-the-shutter-sound-in-silent-mode/ Reboot your device to revert the changes. iOS14❌ Install TrollStore AltStore Credits https://github.com/zhuowei MacDirtyCow exploit...
DroneCamera
DroneCamera An Android app for viewing the live video stream from HASAKEE FPV drones. Built by reverse engineering the proprietary UDP protocol used by the drone's WiFi camera. Supported Drone HASAKEE FPV Drone WiFi SSID: HASAKEE-WiFi-XXXXX VGA camera using the 0x6363 UDP protocol Drone IP:...
CVE-2026-90847
Overview iuxset.cgi contains an authenticated remote code execution RCE vulnerability via file upload. It lives in the function that's invoked when iuxset.cgi is called with tmenu=camera and smenu=systemsetup, which maps to Camera Management → System Setup in the administrator web UI. Although it...
CVE-2017-7921
CVE-2017-7921 exploit This script allows interaction with a CVE-2017-7921 vulnerable camera to perform the following operations: 1. Download and decrypt a configuration file, containing the camera's admin's password. 2. Continuously download images every second. 3. Convert a series of downloaded...
D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure
D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...
CVE-2026-25272
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
CVE-2026-25273
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25269
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size...
CVE-2026-25270
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
