References https://www.vulncheck.com/advisories/geovision-command-injection-rce-picture-catch-cgi https://nvd.nist.gov/vuln/detail/CVE-2018-25118 https://www.exploit-db.com/exploits/43982 https://www.tenable.com/cve/CVE-2018-25118 https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-25118 https://www.geovision.com.tw/cyber_security.php https://www.ddpoc.com/DVB-2023-4395.html https://cve.imfht.com/detail/CVE-2018-25118 https://www.sxcast.edu.cn/uploadfile/ueditor/file/202510/1761869308d5a4ea.pdf https://www.linkedin.com/posts/cve-find_cve201825118-cve-cybersecurity-activity-7386154273602052097-Ui1i https://bugbounty.com.au/viewtopic.php?t=10965 https://www.exploit-db.com/exploits/43983 https://github.com/mcw0/PoC/blob/fb06efe05b7e240dc88ff31eb30e1ef345509dce/Geovision-PoC.py
Related VulnerabilitiesPoCCVE-2017-8225: GoAhead Camera - Credential DisclosurePoCCVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site ScriptingPoCCVE-2019-25246: BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File DisclosureTattile Camera /api/v1/security/login 默认口令漏洞(CVE-2026-26341)PoCCVE-2026-26341: Tattile Camera < 1.181.5 - Default Login天地伟业Easy7 /Easy7/rest/inquestRoom/isHashCameraAuth SQL 注入漏洞PoCbrickcom-camera-default-login: Brickcom Camera - Default LoginPoCbrickcom-camera-unauth-snapshot: Brickcom Camera - Unauthenticated Snapshot AccessPoCCVE-2025-1338: NUUO Camera <=20250203 - OS Command InjectionAllsky Camera /execute.php cmd 命令执行漏洞Allsky Camera /execute.php id 命令执行漏洞(CVE-2025-63414)