CVE-2025-1738 Multiple vulnerabilities in Trivision Camera NC227WF

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party...

CVE-2025-1738

The CVE-2025-1738 entry concerns Trivision NC227WF cameras with firmware v5.8.0, where a Password Transmitted over Query String vulnerability exposes credentials to a third party. The root cause is credentials being sent in the URL/query string, enabling potential disclosure. The vulnerability ha...

CVE-2025-1738 Multiple vulnerabilities in Trivision Camera NC227WF

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party...

PT-2025-8940 · Trivision · Trivision Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: Trivision Camera NC227WF version 5.8.0 Description: An Authentication Bypass issue allows an attacker to retrieve administrator's credentials in cleartext. This is achieved by sending a request to the "/en/player/activex pal.asp" API endpoint...

CVE-2025-1738: Use of GET Request Method With Sensitive Query Strings

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party...

CVE-2025-1739: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to...

UniFi Protect Camera Code Execution

The vulnerability of the UniFi Protect Camera system’s control interface relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and gain full control over the system...

UniFi Protect Camera Authentication Bypass

The vulnerability of UniFi Protect Camera systems lies in errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the system...

YI Smart Dash Camera 安全漏洞

YI Smart Dash Camera is a smart car recorder from YI. A security vulnerability exists in YI Smart Dash Camera version v3.88, which originates from improper access control of the HTTP server, allowing unrestricted file downloads, uploads, and API commands to be executed, which may result in...

CVE-2025-1338

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338

CVE-2025-1338 affects NUUO Camera versions up to 20250203. The vulnerability resides in the handle_config.php function print_file, where manipulation of the log argument enables remote OS command injection. The issue is remotely exploitable and has public exploits/public disclosure. Impact is rem...

CVE-2025-1338 NUUO Camera handle_config.php print_file command injection

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338 NUUO Camera handle_config.php print_file command injection

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

PT-2025-6881

Name of the Vulnerable Software and Affected Versions NUUO Camera versions prior to 20250203 Description A critical issue exists in NUUO Camera that allows for remote command injection. The issue affects the print file function within the /handle config.php file. Manipulation of the log argument...

NUUO Camera 注入漏洞

NUUO Camera is a series of webcams from NUUO. An injection vulnerability exists in NUUO Camera 20250203 and earlier versions, which originates in the printfile function of /handleconfig.php with a command injection in the parameter log...

CVE-2025-1338: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-35344

Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800NN2, YMF50B, YM800SV2, YM500L8, and YM200E10...

CVE-2024-35342

Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280,...

CVE-2025-25526

Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...