11 matches found
CVE-2026-55863
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post method in motioneye/handlers/action.py lacks the BaseHandler.auth decorator, allowing an unauthenticated remote...
CVE-2026-55863
CVE-2026-55863 affects motionEye (mEye) , a web interface for the motion video surveillance daemon. The root cause is a missing @BaseHandler.auth() decorator on the ActionHandler.post() method in motioneye/handlers/action.py (CWE-862), leaving the /action// endpoint accessible without authenticat...
CVE-2026-55863 motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post method in motioneye/handlers/action.py lacks the BaseHandler.auth decorator, allowing an unauthenticated remote...
CVE-2026-55863 motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post method in motioneye/handlers/action.py lacks the BaseHandler.auth decorator, allowing an unauthenticated remote...
CVE-2026-55863 motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution
motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post method in motioneye/handlers/action.py lacks the BaseHandler.auth decorator, allowing an unauthenticated remote...
CVE-2026-73423 Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered
Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware primitive, while actions and pages can dispatch to user code independently. Mounting actions before middleware, as in the...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the post function in the ActionHandler process. An attacker can execute camera actions such as triggering snapshots, starting or stopping video recording, or running configured action scripts without...
EUVD-2017-8010
Malware in sbrugna...
Google Android elevation of privilege vulnerability (CNVD-2026-10642)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from a lack of privilege checking in the onLastAccessedStackLoaded function in ActionHandler.java, which can be exploited by an attacker to...