Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69735: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

PT-2026-87690

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

CVE-2022-25012-dvr4-weak-password-encryption — Updated!

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

Multiple CCTV-DVR Vendors

Remote Code Execution in CCTV-DVR affecting over 70 different vendors !/usr/bin/env python3 -- coding: utf-8 -- """Multiple CCTV-DVR Vendors""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = 'name': 'Multiple CCTV-D...

DVR Creds Disclosure

Module exploits authentication bypass vulnerability in multiple DVR devices allowing attacker to retrieve users credentials. !/usr/bin/env python3 -- coding: utf-8 -- """DVR Creds Disclosure""" import json import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

MVPower DVR Jaws RCE

Module exploits MVPower DVR Jaws RCE vulnerability through 'shell' resource.Successful exploitation allows remote unauthorized attacker to execute commands on operating system level. Vulnerablity was actively used by IoT Reaper botnet. !/usr/bin/env python3 -- coding: utf-8 -- """MVPower DVR Jaws...

TBK DVR - Unauthenticated OS Command Injection (CVE-2024-3721)

Exploits CVE-2024-3721 on TBK DVR devices via /device.rsp command injection with Cookie uid=1. Command output is returned in the HTTP response; opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TBK DVR unauthenticated OS command injection CVE-2024-3721 — opens...

CCTV DVR - Cross Web Server Language RCE Detection

Detects Cross Web Server DVR command injection via /language/Swedish$IFS&&echo and verifying written test file under /mnt/mtd/test. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple CCTV DVR Cross Web Server language path RCE.""" from kittysploit import from lib.protocols.http.httpclient impo...

TBK DVR - OS Command Injection Detection (CVE-2024-3721)

TBK DVR devices and rebrands allow unauthenticated OS command injection via /device.rsp?opt=sys&cmd=SOSTREAMAX&mdb=sos&mdc= with Cookie uid=1. !/usr/bin/env python3 -- coding: utf-8 -- """TBK DVR OS command injection via device.rsp CVE-2024-3721.""" import re from urllib.parse import quote from...

Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection Detection

Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Tools DVR VX16 4.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Web Viewer for Samsung DVR - Detect

Detects Web Viewer for Samsung DVR - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Web Viewer for Samsung DVR - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Viewer for Samsung DVR -...

Argus Surveillance DVR 4.0.0.0 - Local File Inclusion Detection

Argus Surveillance DVR 4.0.0.0 devices allow unauthenticated local file inclusion, leading to file disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Argus Surveillance DVR 4.""" from kittysploit import from lib.protocols.http.httpclien...

AVTECH AVC798HA DVR - Information Exposure Detection

AVTECH AVC798HA DVR is susceptible to information exposure. CGI scripts in the /cgi-bin/nobody directory can be accessed without authentication. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure Detection

The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time streaming protocol RTSP credentials in plain-text. !/usr/bin/env python3 -- coding: utf-8 -- """The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time...

AVTECH DVR - SSRF Detection

AVTECH DVR device, Search.cgi can be accessed directly. Search.cgi is responsible for searching and accessing cameras in the local network. Search.cgi provides the cgiquery function. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH DVR device, Search.""" from kittysploit import from...

TVT DVR Sensitive Device - Information Disclosure Detection

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. !/usr/bin/env pytho...

Intelbras DVR - Unrestricted Access Detection

The HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. !/usr/bin/env python3 -- coding: utf-8 -- """The HTTP GET request to /cap.""" from kittysploit import from...

CVE-2026-12849

Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. libNetSetObj.so is an internal library...

EUVD-2026-38649

GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with i...