CVE-2024-9324

Intelbras InControl (up to 2.21.57) contains a code injection vulnerability in the Relatório de Operadores Page, affecting the /v1/operador/ endpoint. The issue arises from manipulation of the fields argument, enabling remote code execution. An exploit has been publicly disclosed, and upgrading t...

CVE-2024-9325

CVE-2024-9325 affects Intelbras InControl up to version 2.21.56. The issue is an unquoted search path vulnerability in incontrol-service-watchdog.exe (C:\Program Files (x86)Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe) that could allow local host execution. Upgradin...

CVE-2025-4286

CVE-2025-4286 affects Intelbras InControl (versions up to 2.21.59). The vulnerability is in an unknown function of the Dispositivos Edição Page, where manipulation of the Senha de Comunicação argument results in unprotected credential storage. It can be exploited remotely, and public exploits hav...

CVE-2025-0784

The CVE-2025-0784 entry applies to Intelbras InControl (versions up to 2.21.58). Affects the /v1/usuario/ code path in the Registered User Handler, enabling cleartext transmission of sensitive information. The vulnerability can be exploited remotely with high attack complexity and no required pri...

CVE-2025-8515

The CVE-2025-8515 entry concerns Intelbras InControl 2.21.60.9. The vulnerability affects the unknown code path in the /v1/operador/ JSON Endpoint, enabling information disclosure when manipulated remotely. Exploitation is described as high complexity with no required user interaction and no priv...

CVE-2025-7061

CVE-2025-7061 affects Intelbras InControl up to version 2.21.60.9. The issue is a csv injection in unknown code under /v1/operador/, with remote exploitation reported and publicly disclosed. Multiple connected sources confirm the vulnerability and its public discussion. Public commentary from PT-...

CVE-2025-6765

CVE-2025-6765 affects Intelbras InControl 2.21.60.9, where the HTTP PUT Request Handler’s processing of the file at "/v1/operador/" can lead to permission issues. The vulnerability arises from how the endpoint handles PUT requests, enabling remote initiation with potential impact on permissions. ...