DahuaLoginBypass

DahuaLoginBypass Chrome 扩展程序，利用漏洞 CVE-2021-33044 在无需认证的情况下登录大华 IP 摄像头及 VTH/VTO（可视对讲）设备。 对于其他设备类型（NVR/DVR/XVR 等），存在 CVE-2021-33045，该漏洞无法通过普通 Web 浏览器利用。 这些漏洞很可能在 2021 年 9 月之后发布的固件中得到修复。 漏洞发现者鸣谢：bashis 安装 从 发布页面 下载 .zip 文件。 1. 将此 zip 包中的文件夹解压到某个位置。 2. 前往 Chrome 的扩展程序页面（ chrome://extensions ）。 3...

CVE-2017-16778-Intercom-DTMF-Injection

调用DTMF音调以获得Fermax电梯对讲系统的物理门禁权限（CVE-2017-16778） 特别鸣谢 首先，感谢@dizijoyjoy协助搭建演示环境，以便成功拍摄。 特别感谢Fermax对其产品安全漏洞报告的及时响应。他们沟通协调密切，并不断提供修复和补丁活动的更新。感谢愉快的合作！ 简要描述 发现一款Fermax对讲系统产品存在通过双音多频（DTMF）音调绕过授权的漏洞。此类绕过可能使攻击者在未经公寓业主批准或知情的情况下，非法进入住宅楼层。如果该对讲系统与电梯集成，所有受限楼层都可能被访问。Fermax此后已在受影响产品线上修复此问题。 详情...

CVE-2023-28810

CVE-2023-28810 Código de exploit para CVE-2023-28810. udp-config-changer.py Cambia la configuración en ejecución de un intercomunicador hikvision objetivo sin necesidad de autenticación alguna. udp-password-brute.py Intenta recuperar la contraseña de administrador del dispositivo mediante...

CVE-2026-89174

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

CVE-2026-89175

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-89173

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

CVE-2026-89175

The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...

CVE-2026-89175 Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

EUVD-2026-76002

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-89174

The Smart Video Intercom System developed by Kingdom Communication Associated suffers from a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts by performing a large number of login attempts, resulting in a high confidentiality impact ...

CVE-2026-89174 Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

EUVD-2026-76001

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

CVE-2026-89173

The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...

EUVD-2026-76000

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

CVE-2026-89173 Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

CVE-2026-85544

There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...

CVE-2026-85544

There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...

CVE-2026-85544

CVE-2026-85544 is an Improper Encryption Configuration vulnerability affecting some Hikvision Intercom Products . The flaw allows an attacker with physical access to forge M1 cards , leading to high confidentiality impact and low integrity impact (CVSS 3.1: 5.2 MEDIUM ). No specific product model...

EUVD-2026-75400

There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...