Unauthenticated command injection in a variety of Hikvision IP cameras. This vulnerability was reportedly added to the Moobot botnet in December, and continues to be actively exploited.
Vulmon