pwneye

pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements python3 Python Pacakges = requests, Fakeuseragent,...

CVE-2026-111100

A flaw was found in the Kiloview E3 Open Network Video Interface Forum ONVIF device service. The service responds to specific informational requests without requiring authentication, resulting in information disclosure. A remote, unauthenticated attacker can exploit this issue to retrieve sensiti...

CVE-2026-110825

A flaw was found in Kiloview E3. The device's Open Network Video Interface Forum ONVIF service accepts network and time configuration write operations without enforcing authentication. A remote, unauthenticated attacker can exploit this flaw to alter the device hostname, redirect Domain Name Syst...

CVE-2026-110491

A flaw was found in Kiloview E3. An unauthenticated remote attacker can cause a Denial of Service DoS by sending malformed or incomplete requests to the Open Network Video Interface Forum ONVIF service. Successful exploitation renders the service unresponsive to new connections, temporarily...

EUVD-2026-108547

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be...

EUVD-2026-108551

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the...

EUVD-2026-108544

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting...

CVE-2026-110491

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be...

CVE-2026-110825

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the...

CVE-2026-111100

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting...

CVE-2026-110825 Kiloview E3 NDI Encoder Missing Authentication for Critical Function

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the...

CVE-2026-110825

The Kiloview E3 NDI encoder is affected by a vulnerability where the ONVIF device service fails to require authentication for critical configuration write operations. An unauthenticated remote attacker can modify the hostname , DNS resolution , or NTP configuration . This allows for follow-on att...

CVE-2026-110491 Kiloview E3 NDI Encoder NULL Pointer Dereference

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be...

CVE-2026-110491

The Kiloview E3 NDI Encoder is vulnerable to a NULL Pointer Dereference (CWE-476) within its ONVIF service . An unauthenticated party with network access can trigger this by sending malformed or incomplete requests to specific operations, causing the service to stop accepting new connections. Whi...

CVE-2026-111100 Kiloview E3 NDI Encoder Missing Authentication for Critical Function

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting...

CVE-2026-111100

The Kiloview E3 NDI Encoder is impacted by a missing authentication vulnerability in its ONVIF device service . A remote, unauthenticated party can send specific informational requests to retrieve detailed device identifiers and a list of configured user accounts including their privilege levels....

XM_ONVIF_auth_bypass

CVE-2025-65856 - ONVIF authentication bypass on XM 530 IP cameras Proof-of-concept code Bash and Python for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated access to sensitive device information and live video streams: Proof-of-concepts Curl...

CVE-2020-25747

CVE-2020-25747 Suggested description The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the...

CVE-2026-104945

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...