[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":44,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":51,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":57,"vulnerability-26904":64},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":14,"text":41,"link":8,"external":9,"targets":42,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Homepage","Turn confirmed vulnerabilities into evidence your auditor accepts. Testing requirements for DORA, NIS2, SOC 2, ISO 27001, and CRA.",[43],"\u002F",["Island",45],{"key":46,"params":47,"result":49},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":48},"{}",{"head":50},{},["Island",52],{"key":53,"params":54,"result":55},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":48},{"head":56},{},["Island",58],{"key":59,"params":60,"result":62},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":61},"{\"text-color\":\"gray\"}",{"head":63},{},{"id":65,"detectable_with":66,"vuln_details":73,"vuln_id":87,"name":88,"published":89,"updated":74},26904,{"tool":67,"engine":70},{"id":68,"name":69},1,"Network Scanner",{"id":71,"name":72},3,"OpenVAS",{"id":65,"codename":74,"description":74,"severity":74,"risk_description":75,"public_description":76,"public_recommendation":77,"recommendation":74,"references":78,"cvssv3":74,"epss_score":74,"epss_percentile":74,"cve":85,"in_cisa_catalog":9,"date":74,"software_type":74,"vendor":74,"product":74,"ptt_exploit_capabilities":74},null,"The installation of HangZhou XiongMai Technologies Net Surveillance allows any attacker to bypass the login screen to get full access to the camera feed and the version number. This issue may be exploited by a remote attacker to gain access to sensitive information through the camera feed or to get access to a potentially vulnerable version.","The remote installation of HangZhou XiongMai Technologies Net Surveillance is prone to an authentication bypass vulnerability.","No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.",[79,80,81,82,83,84],"https:\u002F\u002Fsec-consult.com\u002Fblog\u002Fdetail\u002Fmillions-of-xiongmai-video-surveillance-devices-can-be-hacked-via-cloud-feature-xmeye-p2p-cloud\u002F","https:\u002F\u002Fsecurityledger.com\u002F2016\u002F10\u002Fshoddy-supply-chain-lurks-behind-mirai-botnet\u002F","https:\u002F\u002Fflashpoint.io\u002Fblog\u002Fmirai-botnet-when-vulnerabilities-travel-downstream\u002F","https:\u002F\u002Fkrebsonsecurity.com\u002F2016\u002F10\u002Feurope-to-push-new-security-rules-amid-iot-mess\u002F","https:\u002F\u002Fkrebsonsecurity.com\u002Ftag\u002Fxc3511\u002F","https:\u002F\u002Fgithub.com\u002Fdaniel-beck\u002FDWF-Database\u002Fblob\u002Fmaster\u002FDWF-Database-2016.csv",[86],"CVE-2016-1000246","NETSCAN-OPENVAS-1.3.6.1.4.1.25623.1.0.114081","HangZhou XiongMai Technologies Net Surveillance DVR.html Authentication Bypass Vulnerability","2025-03-19T00:00:00Z"]