Feed/CVE-2018-9995
CVE-2018-9995CRITICALCVSS 9.8

CVE-2018-9995

Published Apr 10, 2018·Updated Jun 16, 2026

NVD Description

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.

Public Exploits & PoCs22 found

PoC: CVE-2018-9995_dvr_credentials

(CVE-2018-9995) Get DVR Credentials

472

PoC: DVR-Exploiter

DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995

96

PoC: cve-2018-9995

exploit camera with vuln cve-2018-9995 ( Novo, CeNova, QSee, Pulnix, XVR 5 in 1 (title: "XVR Login"), Securus, - Security. Never Compromise !! - Night OWL, DVR Login, HVR Login, MDVR Login )

5

PoC: CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995_Batch_scanning_exp

4

PoC: CVE-2018-9995_check

DVR系列摄像头批量检测

2

PoC: CVE-2018-9995-DVR-Credentials-Extractor

This project demonstrates the publicly disclosed CVE-2018-9995 vulnerability found in multiple embedded DVR devices.

1

PoC: CVE-2018-9995

CVE-2018-9995 هک دوربین مداربسته با آسیب پذیری

1

PoC: HTC

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

1

PoC: CVE-2018-9995-POC

CVE-2018-9995 POC

1

PoC: CVE-2018-9995_dvr_credentials-dev_tool

webcam bug (python)

1

PoC: CVE-2018-9995-rs

POC of CVE-2018-9995 written in Rust.

PoC: DVRC

(CVE-2018-9995) Get DVR Credentials

PoC: DVR_Credential_Scanner

A tool for scanning DVR systems vulnerable to CVE-2018-9995 credential disclosure. Educational purposes only - demonstrates how attackers exploit authentication bypasses in DVR/IP camera systems. Includes detailed guides for finding, testing, and understanding the vulnerability.

PoC: CVE-DVr

CVE-2018-9995

PoC: Cam

Este script está creado para mostar usuarios de DVR, VULNERABILIDAD (CVE-2018-9995)

PoC: DVR_Sploit

Simple python3 script to automate CVE-2018-9995

PoC: CVE-2018-9995

CVE-2018-9995 Exploit Tool for Python3

PoC: CVE-2018-9995-EXPLOIT

A PoC exploit for CVE-2018-9995 - DVR Authentication Bypass

PoC: DVRFaultNET

.NET console application that exploits CVE-2018-9995 vulnerability

PoC: HTC

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

PoC: CVE-2018-9995

DVR username password recovery.

PoC: cve-2018-9995

exploit camera with vuln cve-2018-9995 ( Novo, CeNova, QSee, Pulnix, XVR 5 in 1 (title: "XVR Login"), Securus, - Security. Never Compromise !! - Night OWL, DVR Login, HVR Login, MDVR Login )

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free