306 matches found
CVE-2021-47731 Selea Targa IP Camera Developer Backdoor Configuration Overwrite
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite...
CVE-2025-13510
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings...
EUVD-2025-200298
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings...
EUVD-2020-30821
Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorizatio...
CVE-2020-36871
ESCAM QD-900 WIFI HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint allows remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup can include...
CVE-2025-63223
The Axel Technology StreamerMAX MK II devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and...
CVE-2025-63221
The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...
PT-2025-47470
Name of the Vulnerable Software and Affected Versions Axel Technology StreamerMAX MK II versions 0.8.5 through 1.0.3 Description The software contains a Broken Access Control issue because of missing authentication. This affects the /cgi-bin/gstFcgi.fcgi API endpoint. An unauthenticated remote...
CVE-2022-50596
D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...
EUVD-2019-4105
Malware in sbrugna...
EUVD-2020-2665
Malware in sbrugna...
EUVD-2020-26782
Malware in sbrugna...
EUVD-2020-17833
Malware in sbrugna...
EUVD-2019-7455
Malware in sbrugna...
EUVD-2019-7276
Malware in sbrugna...
EUVD-2020-4355
Malware in sbrugna...
EUVD-2020-4351
Malware in sbrugna...
EUVD-2017-15117
Malware in sbrugna...