Embedded / Firmware

5 writeups

April 13, 2026Unauth access

ONVIF RTSP-over-WebSocket endpoint accessible without authentication.

April 13, 2026SSRF

IPv6-mapped IPv4 (::ffff:127.0.0.1) bypasses the IPv4-only loopback filter on httptest.cgi.

April 13, 2026Validation gap

dnsupdate.cgi delete path skips the input validation applied to add.

April 12, 2026SSRF

pingtest.cgi skips the camera's own validateaddr helper.

April 12, 2026Info disclosure

SNMP community strings returned in the viewer-role config endpoint.