scan-for-webcams

scan-for-webcams 📷 自动探测可公开访问的网络摄像头 English docs 目录 使用方法 下载安装 演示 使用方法 python MJPG.py : 用来探测公开的 MJPG 播放器 python webcamXP.py : 用来检测公开的 webcamXP 播放器 程序会输出一列地址，格式如： ipaddress:port 如果您的终端支持链接，请单击该链接并在浏览器中将其打开，否则，请复制该链接并在浏览器中将其打开。 下载装 1. clone&cd 进这个repo: git clone...

CVE-2026-26340

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of...

FLIR Systems AX8 Cameras Missing Authentication for Critical Function (CVE-2018-25139)

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage. This plugin only wor...

EUVD-2005-4420

Malware in sbrugna...

CVE-2025-9983

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only...

CVE-2025-9983

The CVE-2025-9983 affects GALAYOU G2 IP cameras, where RTSP streams can be accessed without valid credentials. The issue arises because default credentials are not required to access streams, and changing them does not affect behavior, indicating an authentication bypass in the RTSP service. Affe...

CVE-2025-9983: Missing Authentication for Critical Function

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only...

USN-4853-1 liblivemedia vulnerabilities

It was discovered that liveMedia incorrectly handled certain network packets. An attacker could possibly use this issue to execute arbitrary code. CVE-2018-4013 It was discovered that liveMedia incorrectly handled certain network sessions. An attacker could possibly use this issue to cause a deni...

GStreamer Base Plugins: Heap-based buffer overflow

Background A well-groomed and well-maintained collection of GStreamer plug-ins and elements, spanning the range of possible types of elements one would want to write for GStreamer. Description It was discovered that GStreamer Base Plugins did not correctly handle certain malformed RTSP streams...

USN-3958-1: GStreamer Base Plugins vulnerability

It was discovered that GStreamer Base Plugins did not correctly handle certain malformed RTSP streams. If a user were tricked into opening a crafted RTSP stream with a GStreamer application, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code...

Improper access control

Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...

PT-2018-14455

Name of the Vulnerable Software and Affected Versions TP-Link TL-SC3130 version 1.6.18P12 121101 Description The issue allows unauthenticated access to RTSP streams. This can be demonstrated by accessing the "/jpg/image.jpg" URI. Recommendations For TP-Link TL-SC3130 version 1.6.18P12 121101,...

VLC Media Player Multiple Vulnerabilities - Mar 12 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnmar12win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - Mar 12 Windows Authors: Madhuri D Copyright: Copyright c 20...

VLC Media Player Multiple Vulnerabilities (Mar 2012) - Linux

VLC Media Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2012-3527

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 2.0.1 Description The issue is related to multiple heap-based buffer overflows in the handling of crafted Real RTSP streams. This can lead to a denial of service, causing the application to crash, or...

Gentoo Security Advisory GLSA 200801-12 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200801-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 1472-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1472-1. OpenVAS Vulnerability Test $Id: deb14721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1472-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

xine-lib: User-assisted execution of arbitrary code

Background xine-lib is the core library package for the xine media player. Description Luigi Auriemma reported that xine-lib does not properly check boundaries when processing SDP attributes of RTSP streams, leading to heap-based buffer overflows. Impact An attacker could entice a user to play...

Debian DSA-1472-1 : xine-lib - buffer overflow

Luigi Auriemma discovered that the Xine media player library performed insufficient input sanitising during the handling of RTSP streams, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...