MVPower DVR Shell Unauthenticated Command Execution

This module exploits an unauthenticated remote command execution vulnerability in MVPower digital video recorders. The 'shell' file on the web interface executes arbitrary operating system commands in the query string. This module was tested successfully on a MVPower model TV-7104HE with firmware...

Security IP Camera Star Vision DVR - Authentication Bypass

Exploit Title: Security IP Camera Star Vision DVR Authentication Bypass Date: 2015-08-13 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: Version: All Versions Exploit : 1 - First, open your Chrome browser 2 - Enter the IP address or domain to see the logi...

Security IP Camera Star Vision DVR - Authentication Bypass

Security IP Camera Star Vision DVR - Authentication Bypass Exploit Title: Security IP Camera Star Vision DVR Authentication Bypass Date: 2015-08-13 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: Version: All Versions Exploit : 1 - First, open your Chrome...

AVTECH 744 DVR Account Information Retrieval

This module will extract the account information from the AVTECH 744 DVR devices, including usernames, cleartext passwords, and the device PIN, along with a few other miscellaneous details. In order to extract the information, hardcoded credentials admin/admin are used. These credentials can't be...

Hikvision DS-7108HWI-SH XML Injection / Abuse Issues

Hello list! There are vulnerabilities in Hikvision DS-7108HWI-SH. These are XML Injection, Abuse of Functionality and Brute Force vulnerabilities. All these vulnerabilities are present in other IP cameras and DVR of Hikvision. ------------------------- Affected vendors: -------------------------...

Hikvision DS-2CD2012-I XML Injection / Abuse Issues

Hello list! There are vulnerabilities in Hikvision DS-2CD2012-I. These are XML Injection, Abuse of Functionality and Brute Force vulnerabilities. All these vulnerabilities are present in other IP cameras and DVR of Hikvision. ------------------------- Affected vendors: -------------------------...

LG DVR LE6016D - Unauthenticated Remote Users/Passwords Disclosure Exploit

Exploit for hardware platform in category web applications !/usr/bin/perl LG DVR LE6016D unauthenticated remote users/passwords disclosure exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Digital video recorder DVR surveillance is the use of cameras, often hidden or concealed,...

LG DVR LE6016D - Remote File Disclosure

LG DVR LE6016D - Remote File Disclosure ---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...

LG DVR LE6016D Credential Disclosure

!/usr/bin/perl LG DVR LE6016D unauthenticated remote users/passwords disclosure exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Digital video recorder DVR surveillance is the use of cameras, often hidden or concealed, that use DVR technology to record video for playback or...

LG DVR LE6016D - Remote Users/Passwords Disclosure

!/usr/bin/perl LG DVR LE6016D unauthenticated remote users/passwords disclosure exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Digital video recorder DVR surveillance is the use of cameras, often hidden or concealed, that use DVR technology to record video for playback or...

LG DVR LE6016D - Remote UsersPasswords Disclosure

LG DVR LE6016D - Remote UsersPasswords Disclosure !/usr/bin/perl LG DVR LE6016D unauthenticated remote users/passwords disclosure exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Digital video recorder DVR surveillance is the use of cameras, often hidden or concealed, that use...

Global 40W webcam security risks-vulnerability warning-the black bar safety net

H. 2 6 4 DVR, don't know Chinese how called, the camera, a large number of deployments all over the world. Steady 40w. IP: http://189.180.16.235/ factory reset, the account password: admin admin IP: http://113.182.179.91/ IP: http://187.148.169.94/ 1 2 next...

Hikvision DVR Basic Authentication Buffer Overflow (CVE-2014-4880)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker to inject and execute arbitrary code on t...

Hikvision DVR Request Header and Request Body Buffer Overflow (CVE-2014-4878; CVE-2014-4879)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Request Header Handling and Request Body Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker ...

Cisco ISB8320-E High-Definition IP-Only DVR Remote Unauthenticated Access Vulnerability

An issue in Disaster Recovery DRA mode of the Cisco ISB8320-E High-Definition IP-Only DVR could allow an unauthenticated, remote attacker to access the device via telnet without authentication for the duration of the recovery boot. The issue is due to the disaster recovery process. An attacker...

CVE-2014-8006

The CVE-2014-8006 issue concerns the Cisco ISB8320-E High-Definition IP-Only DVR in Disaster Recovery (DRA) mode. According to Cisco’s advisory and NVD records, during the recovery boot the DRA process allows an unauthenticated remote attacker to access the device via Telnet, bypassing authentica...

CVE-2014-4880

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header...

Buffer overflow

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header...

CVE-2014-4880

CVE-2014-4880 describes a buffer overflow in Hikvision DVR RTSP handling that enables remote code execution. The NVD entry notes a vulnerability in Hikvision DVR DS-7204 firmware (2.2.10 build 131009) and other models, exploitable via a long RTSP PLAY request with an oversized Authorization heade...

CVE-2014-4880

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header...