Argus Surveillance DVR 4.0.0.0 Privilege Escalation Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com...

Netwave IP Camera Detection

Detects whether the target is a Netwave IP camera and if so, tries to gather information about firmware and software version- SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Netwave IP Camera Information Disclosure Vulnerability

Netwave IP cameras are prone to multiple Information Disclosure Vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Netwave IP camera information disclosure vulnerability (CNVD-2018-16961)

Netwave IP camera is a network camera produced by Netwave SystemsB.V. in the Netherlands. An information disclosure vulnerability exists in the getstatus.cgi file in the Netwave IP camera. An attacker can exploit this vulnerability to disclose sensitive information on the device...

CVE-2018-11654

Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...

CVE-2018-11653

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

Information disclosure

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

Information disclosure

Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...

CVE-2018-11654

An information disclosure vulnerability exists in Netwave IP cameras within the get_status.cgi file. This flaw allows an unauthenticated attacker to exfiltrate sensitive information from the device via HTTP on port 8000 . While the vulnerability is documented as a WillNotFix in some security scan...

CVE-2018-11653

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

CVE-2018-11654

Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...

CVE-2018-11653

CVE-2018-11653 affects Netwave IP cameras. The root cause is an information-disclosure in the //etc/RT2870STA.dat file accessible via HTTP on port 8000, enabling an unauthenticated attacker to exfiltrate sensitive network configuration data (SSID and passwords). Public sources in the connected do...

CVE-2018-11653: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

CVE-2018-11654: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...

Hikvision IP Camera 5.4.0 - User Enumeration Exploit

Exploit for hardware platform in category remote exploits Exploit title: Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Author: Alfie Website: https://www.hikvision.com/en/ Software: Hikvision Camera Versions: DS-2CD2xx2F-I Series: V5.2.0 build 140721 to V5.4.0 build 160530 DS-2CD2xx0F-I...

Hikvision IP Camera 5.4.0 - User Enumeration (Metasploit)

Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Exploit title: Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Author: Alfie Date: 2018-08-21 Website: https://www.hikvision.com/en/ Software: Hikvision Camera Versions: DS-2CD2xx2F-I Series: V5.2.0 build 140721 to V5.4.0 build 16053...

Hikvision IP Camera 5.4.0 - User Enumeration (Metasploit)

Exploit title: Hikvision IP Camera 5.4.0 - User Enumeration Metasploit Author: Alfie Date: 2018-08-21 Website: https://www.hikvision.com/en/ Software: Hikvision Camera Versions: DS-2CD2xx2F-I Series: V5.2.0 build 140721 to V5.4.0 build 160530 DS-2CD2xx0F-I Series: V5.2.0 build 140721 to V5.4.0...

NUUO NVRmini upgrade_handle.php Remote Command Execution

This exploits a vulnerability in the web application of NUUO NVRmini IP camera, which can be done by triggering the writeuploaddir command in the upgradehandle.php file. Module Options msf use exploit/multi/http/nuuo/nvrminiupgraderce msf undefinednvrminiupgraderce show actions ...actions... msf...

Trendnet Internet Camera Detection

Detection of Trendnet Internet Camera devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...