Alejandro Leon Morales

5 exploits Active since Jan 2020
CVE-2013-1595 EXPLOITDB CRITICAL WORKING POC
Vivotek PT7135 Firmware 0300a and 0400a - Buffer Overflow via RTSP Authorization Header
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service.
CVSS 9.8
CVE-2013-1597 EXPLOITDB MEDIUM WORKING POC
Vivotek PT7135 Firmware 0300a and 0400a - Path Traversal via GET Request
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials.
CVSS 6.5
CVE-2013-1594 EXPLOITDB HIGH text WORKING POC
Vivotek PT7135 Firmware 0300a/0400a - Cleartext Credential Storage Exposes Sensitive Information
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.
CVSS 7.5
EIP-2026-102104 EXPLOITDB text WORKING POC
Vivotek Cameras - Sensitive Information Disclosure
CVE-2013-1598 EXPLOITDB HIGH text WORKING POC
Vivotek PT7135 Firmware 0300a and 0400a - OS Command Injection via system.ntp Parameter
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.
CVSS 8.8