CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T 存在不正确的访问控制漏洞 IC Realtime IP PTZ 球型摄像机 ICIP-P2012T 软件版本 2.420 中存在未认证的流媒体通道 实时源（MJPEG）可通过暴露的 HTTP 通道使用 VLC 网络流进行流式传输。此漏洞严重影响了客户的机密性，并可能用于侦察阶段（识别人员、资产、密码等）。 概念验证 POC 如果允许 HTTP 流式传输，则可使用 URL 路径让用户无需任何认证即可获取摄像机的 MJPEG 流。 路径：...

CVE-2026-88285

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...

CVE-2026-88286

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...

CVE-2026-88286 GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...

CVE-2026-88286

GeoVision GV-LPC2211 V1.13 (also referenced as GV-LPC2011) contains a denial of service vulnerability in its PTZ connection-state management . An unauthenticated remote client can exploit improper handling of PTZ connection state to block the accept loop , preventing new PTZ connections and effec...

EUVD-2026-75320

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...

CVE-2026-88285 GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...

CVE-2026-88285

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service that requires no authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands. The underlying cause is the lack of an authentication mechanism on the service itself. The CVSS v3...

EUVD-2026-75319

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...

PT-2026-89326

🚨 CRITICAL: CVE-2026-88285 CVSS 9.4 GeoVision GV-LPC2211 V1.13 exposes unauthenticated PTZ control service. Remote attackers can retrieve PTZ info & issue commands over the network. Patch immediately. CVE PatchNow https://t.co/aE8CWkDyXw...

PT-2026-89327

🚨 HIGH Severity Alert CVE-2026-88286 | CVSS 7.5 GeoVision GV-LPC2211 V1.13 camera vulnerable to unauthenticated DoS attack on PTZ connections. Remote attackers can block new PTZ connections without authentication. Patch immediately. CVE PatchNow https://t.co/82pJfPEDwE...

PT-2026-34337

My last CVE-2026-31077 of China PTZ camera lead to RCE + RTSP video stream over LAN network. The camera uses the app named “CareCamPro” with +1m downloads on Play Store https://t.co/S0T5XS8udh...

Honeywell多款产品 访问控制错误漏洞

Honeywell I-HIB2PI-UL 2MP, etc., are products of the American company Honeywell. The Honeywell I-HIB2PI-UL 2MP is an infrared dome camera. The Honeywell SMB NDAA MVO-3 is an infrared gimbal camera. The Honeywell PTZ WDR 2MP 32M is a series of night vision cameras. Several Honeywell products have...

CVE-2025-14749

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

CVE-2025-14749 Ningyuanda TC155 ONVIF PTZ Control device_service access control

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

CVE-2025-14749

CVE-2025-14749 affects Ningyuanda TC155, version 57.0.2.0, specifically the ONVIF PTZ Control Interface component via the file /onvif/device_service. Root cause: improper access controls leading to unauthorized access. Attack requires local network access; exploit is publicly available. Implicati...

EUVD-2018-19540

Malware in sbrugna...

EUVD-2018-19539

Malware in sbrugna...

EUVD-2025-7219

Malicious code in bioql PyPI...

CVE-2018-7828

A Cross-Site Request Forgery CSRF vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera...