CVE-2018-18767

An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the Wi-Fi camera (D-Link 825L firmware 1.08) with the credentials (username and password) in base64 cleartext. An attacker could conduct an MitM attack on the local network and very easily obtain these credentials.

• CWE-326

• https://dojo.bullguard.com/dojo-by-bullguard/blog/i-got-my-eyeon-you-security-vulnerabilities-in-baby-monitor/Exploit, Third Party Advisory
• https://dojo.bullguard.com/dojo-by-bullguard/blog/i-got-my-eyeon-you-security-vulnerabilities-in-baby-monitor/Exploit, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18761SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL]…9.8
• CVE-2018-18762SaltOS 3.1 r8126 contains a database download vulnerability.
• CVE-2018-18763SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuar…
• CVE-2018-18764An exploitable arbitrary memory read vulnerability exists in…
• CVE-2018-18765An exploitable arbitrary memory read vulnerability exists in…
• CVE-2018-18766An elevation of privilege vulnerability exists in the Call D…
• CVE-2018-1877IBM Robotic Process Automation with Automation Anywhere 11 c…6.2
• CVE-2018-18771An issue was discovered in LuLu CMS through 2015-05-14. back…
• CVE-2018-18772CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8…
• CVE-2018-18773CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8…
• CVE-2018-18774CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8…
• CVE-2018-18775Microstrategy Web, version 7, does not sufficiently encode u…