Tag
high
advisory
Tbkvision and various DVRs: Unauthenticated credential disclosure (CVE-2018-9995)
1 rule 1 TTP 1 CVEAn unauthenticated credential disclosure vulnerability in various DVR devices allows attackers to retrieve administrative credentials via the /device.rsp endpoint.
tbk-dvr4216 +4
credential-disclosure
cve-2018-9995
dvr
iot
1r
1t
1c
critical
advisory
Xiongmai DVR/NVR Root OS Command Injection Vulnerability (CVE-2026-34005)
2 rules 1 TTPXiongmai DVR/NVR devices are vulnerable to root OS command injection (CVE-2026-34005) due to shell metacharacters in the HostName value, exploitable via an authenticated DVRIP request, potentially allowing arbitrary command execution with root privileges.
CVE-2026-34005
command-injection
xiongmai
dvr
nvr
2r
1t