Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/01 5:15 p.m.•9 views

CVE-2026-0709

Hikvision ワイヤレスAP – CVE-2026-0709 認証済みRCEツール このツールは、Hikvision ワイヤレスアクセスポイントの CVE-2026-0709 をテストするためのPython概念実証(PoC)です。これは、影響を受けるデバイス上でリモートコード実行につながる可能性がある認証済みコマンドインジェクションの脆弱性です。 自分が所有する、または明示的に評価を許可されたシステムに対するセキュリティテストおよび研究用です。 説明 CVE-2026-0709 は認証済み の脆弱性です。攻撃者は有効な認証情報でログインし、その後、Hikvision...

7.2CVSS6.4AI score0.00906EPSS
SaveExploits1
NVD
NVD
•added 2026/07/31 11:17 a.m.•18 views

CVE-2026-16843

Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution...

7.2CVSS0.0092EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•2 views

CVE-2026-0709: Improper Neutralization of Special Elements used in an OS Command

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution...

7.2CVSS6.2AI score0.00906EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/15 8:18 a.m.•21 views

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

7.2CVSS7.2AI score0.01353EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/13 7:10 a.m.•31 views

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

7.2CVSS0.01353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/13 7:10 a.m.•10 views

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

7.2CVSS7.7AI score0.01353EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/13 12:00 a.m.•17 views

PT-2025-25398 · Hikvision · Hikvision Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Hikvision Wireless Access Point affected versions not specified Description: The issue is related to insufficient input validation, allowing authenticated remote command execution. Attackers with valid credentials can exploit this by sending...

9CVSS6.7AI score0.01353EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•9 views

Hikvision Wireless Access Point 安全漏洞

Hikvision Wireless Access Point is a wireless access point device from Hikvision China. A security vulnerability exists in Hikvision Wireless Access Point that stems from insufficient input validation and could lead to authenticated remote command execution...

7.2CVSS6.9AI score0.01353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•1 views

CVE-2025-39240: Improper Neutralization of Special Elements used in an OS Command

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

7.2CVSS6.1AI score0.01353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/21 1:21 a.m.•8 views

CVE-2022-28173

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

9.1CVSS9.4AI score0.00623EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•3 views

CVE-2022-28173: Improper Access Control

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

9.8CVSS5.8AI score0.00623EPSS
SaveExploits0References2
Rows per page
Query Builder