AVTECH DVR - SSRF Detection

AVTECH DVR device, Search.cgi can be accessed directly. Search.cgi is responsible for searching and accessing cameras in the local network. Search.cgi provides the cgiquery function. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH DVR device, Search.""" from kittysploit import from...

CVE-2025-34051: Server-Side Request Forgery (SSRF)

A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgiquery endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests...