CVE-2024-48214: Improper Neutralization of Special Elements used in a Command

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

CVE-2024-31800

Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port...

PT-2024-24210 · Gncc · Gncc Gc2 Indoor Security Camera 1080P

Name of the Vulnerable Software and Affected Versions: GNCC GC2 Indoor Security Camera 1080P affected versions not specified Description: The issue allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port. This is an authentication bypass in GNCC's GC...

PT-2024-24207

Name of the Vulnerable Software and Affected Versions GNCC's GC2 Indoor Security Camera 1080P affected versions not specified Description The issue concerns a hardcoded root password that is identical for all devices in GNCC's GC2 Indoor Security Camera 1080P. This allows an attacker with physica...

PT-2024-24208

Name of the Vulnerable Software and Affected Versions GNCC GC2 Indoor Security Camera 1080P affected versions not specified Description The issue allows an attacker with physical access to read the WiFi passphrase via the UART Debugging Port. This is an information disclosure problem that exists ...

CVE-2024-31800: Improper Authentication

Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port...

CVE-2024-31799: Cleartext Transmission of Sensitive Information

Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the WiFi passphrase via the UART Debugging Port...

CVE-2024-31798: Use of Hard-coded Credentials

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices...

MAL-2024-2581 Malicious code in kimetsu-no-yaiba-to-the-swordsmith-village-2023-full-mp4720p-1080p-hd-4k-english-sub (npm)

--- -= Per source details. Do not edit below this line.=-...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Cross-Site Request Forgery Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. The INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to access the web via all fields...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Denial of Service Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A security vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B, which can be exploited to cause a denial of service by an attacker who can reboot the device via a hidden reboot command...

CVE-2020-19641

CVE-2020-19641 affects INSMA Wifi Mini Spy 1080P HD Security IP Camera, firmware version 1.9.7 B. Authenticated attackers with the Operator privilege can escalate to admin by sending a crafted request to /goform/formUserMng . The connected documents corroborate administrator-privilege escalation ...

CVE-2020-19639

Cross Site Request Forgery CSRF vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI...

CVE-2020-19639

CVE-2020-19639 affects INSMA Wifi Mini Spy 1080P HD Security IP Camera, version 1.9.7 B. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered via all fields to the WebUI. The connected CNVD/NVD entries corroborate CSRF in this specific camera model. Root cause details be...

PT-2021-10381

Name of the Vulnerable Software and Affected Versions: INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B Description: An issue allows an unauthenticated attacker to cause a Denial of Service by rebooting the device. This can be achieved by sending a hidden reboot command to the...

PT-2021-10380

Name of the Vulnerable Software and Affected Versions: INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B Description: A Cross Site Request Forgery CSRF issue affects the device, allowing exploitation via all fields to the WebUI. This could potentially lead to unauthorized actions on...

PT-2021-10384

Name of the Vulnerable Software and Affected Versions: INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the FTP settings page, specifically all fields, which then lead to the...

PT-2021-10383

Name of the Vulnerable Software and Affected Versions: INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B Description: A local attacker can execute arbitrary code by editing the recdata.db file to call a specially crafted GoAhead ASP-file on the SD card. Recommendations: For INSMA Wi...

CVE-2020-19643: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page...

CVE-2020-19642: Unrestricted Upload of File with Dangerous Type

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...