CVE-2018-9995

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.

• http://misteralfa-hack.blogspot.cl/2018/04/tbk-vision-dvr-login-bypass.htmlExploit, Third Party Advisory
• http://misteralfa-hack.blogspot.cl/2018/04/update-dvr-login-bypass-cve-2018-9995.htmlExploit, Third Party Advisory
• https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch-of-dvrs-and-their-video-feeds/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44577/Exploit, Third Party Advisory, VDB Entry
• http://misteralfa-hack.blogspot.cl/2018/04/tbk-vision-dvr-login-bypass.htmlExploit, Third Party Advisory
• http://misteralfa-hack.blogspot.cl/2018/04/update-dvr-login-bypass-cve-2018-9995.htmlExploit, Third Party Advisory
• https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch-of-dvrs-and-their-video-feeds/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44577/Exploit, Third Party Advisory, VDB Entry

Published

Apr 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9989ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 h…7.5
• CVE-2018-9990In Zulip Server versions before 1.7.2, there was an XSS issu…
• CVE-2018-9991Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Use…
• CVE-2018-9992Frog CMS 0.9.5 has XSS via the name field of a new "File" or…
• CVE-2018-9993YUNUCMS 1.0.7 has XSS via the content title on an admin/cont…
• CVE-2018-9994Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-9996An issue was discovered in cplus-dem.c in GNU libiberty, as …
• CVE-2018-9997Cross-site scripting (XSS) vulnerability in mail compose in …
• CVE-2018-9998Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7…
• CVE-2018-9999In Zulip Server versions before 1.7.2, there was an XSS issu…