Skip to content
OpenAdvisories

Archive

1 July 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34065 Public exploit

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

    An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.