Bosch Security Systems Dinion NBN-498 - Web Interface XML Injection

Exploit Title: Bosch Security Systems - XML Injection - Dinion NBN-498 Web Interface Date: 01/09/2015 Exploit Author: neom22 Vendor Homepage: http://us.boschsecurity.com Data Sheet: http://resource.boschsecurity.us/documents/DatasheetenUS9007201286798987.pdf Version: Hardware Firmware 4.54.0026 -...

大华摄像头 IPC-HF2100 2.420.0000.0.R onvif 协议身份认证漏洞

大华摄像头onvif协议的snapshot接口访问不需要身份认证，允许攻击者可直接获得摄像头实时视频图像。 poc：http://ipaddr//onvifsnapshot//...