8 matches found
Dahua IPC/VTH/VTO - Authentication Bypass
Some Dahua products contain an authentication bypass during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33044 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: gy741 severity: critical description: Some...
XVR Login Panel - Detect
XVR login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XVR login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XVR Login Panel - Detect', 'description': 'XVR login panel was...
Dahua Security Cameras Buffer Copy without Checking Size of Input (CVE-2019-9677)
The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC- HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC- HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X...
Dahua Security Cameras Improper Access Control (CVE-2017-9317)
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device. This plugin only works with Tenable.ot. Please visit...
Dahua Security Cameras Incorrect Default Permissions (CVE-2019-9679)
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC- HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build ti...
Exploit for Unrestricted Upload of File with Dangerous Type in Dahuasecurity Smart_Parking_Management
Dahua Smart Park Comprehensive Management Platform: Publishin...
Dahuasecurity Smartpss Firmware Authentication Bypass (CVE-2017-6343)
An authentication bypass vulnerability exists in Dahuasecurity Smartpss Firmware. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...