236 matches found
DahuaLoginBypass
DahuaLoginBypass Chrome 扩展程序,利用漏洞 CVE-2021-33044 在无需认证的情况下登录大华 IP 摄像头及 VTH/VTO(可视对讲)设备。 对于其他设备类型(NVR/DVR/XVR 等),存在 CVE-2021-33045,该漏洞无法通过普通 Web 浏览器利用。 这些漏洞很可能在 2021 年 9 月之后发布的固件中得到修复。 漏洞发现者鸣谢:bashis 安装 从 发布页面 下载 .zip 文件。 1. 将此 zip 包中的文件夹解压到某个位置。 2. 前往 Chrome 的扩展程序页面( chrome://extensions )。 3...
CVE-2017-16778-Intercom-DTMF-Injection
调用DTMF音调以获得Fermax电梯对讲系统的物理门禁权限(CVE-2017-16778) 特别鸣谢 首先,感谢@dizijoyjoy协助搭建演示环境,以便成功拍摄。 特别感谢Fermax对其产品安全漏洞报告的及时响应。他们沟通协调密切,并不断提供修复和补丁活动的更新。感谢愉快的合作! 简要描述 发现一款Fermax对讲系统产品存在通过双音多频(DTMF)音调绕过授权的漏洞。此类绕过可能使攻击者在未经公寓业主批准或知情的情况下,非法进入住宅楼层。如果该对讲系统与电梯集成,所有受限楼层都可能被访问。Fermax此后已在受影响产品线上修复此问题。 详情...
CVE-2023-28810
CVE-2023-28810 Código de exploit para CVE-2023-28810. udp-config-changer.py Cambia la configuración en ejecución de un intercomunicador hikvision objetivo sin necesidad de autenticación alguna. udp-password-brute.py Intenta recuperar la contraseña de administrador del dispositivo mediante...
CVE-2026-89174
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
CVE-2026-89175
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
CVE-2026-89173
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-89175
The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...
CVE-2026-89175 Kingdom Communication Associated|Smart Video Intercom System - Client-Side Authentication
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
EUVD-2026-76002
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...
CVE-2026-89174
The Smart Video Intercom System developed by Kingdom Communication Associated suffers from a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts by performing a large number of login attempts, resulting in a high confidentiality impact ...
CVE-2026-89174 Kingdom Communication Associated|Smart Video Intercom System - Missing Burte-force Protection
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
EUVD-2026-76001
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
CVE-2026-89173
The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...
EUVD-2026-76000
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-89173 Kingdom Communication Associated|Smart Video Intercom System - Sensitive Data Exposure
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...
CVE-2026-85544
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...
CVE-2026-85544
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...
CVE-2026-85544
CVE-2026-85544 is an Improper Encryption Configuration vulnerability affecting some Hikvision Intercom Products . The flaw allows an attacker with physical access to forge M1 cards , leading to high confidentiality impact and low integrity impact (CVSS 3.1: 5.2 MEDIUM ). No specific product model...
EUVD-2026-75400
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...
Hikvision IP ping.php - Command Execution
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...