CVE-2018-7512

CVE-2018-7512 affects Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1). A Cross-Site Scripting vulnerability may allow remote code execution via the device web interface. The public docs describe XSS as part of multiple vulnerabilities, with a CVSS v3 base sc...

CVE-2018-7524

Geutebruck IP cameras G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2018-7524). The issue may allow an unauthenticated or unauthorized user to be added to the system. The NVD/NIST entry documents ...

CVE-2018-7520

An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords...

CVE-2018-7532

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...

CVE-2018-7528

The CVE-2018-7528 entry documents an SQL injection vulnerability in Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) IP cameras, allowing an attacker to alter stored data. Root cause: improper handling of SQL commands in the affected components, enabling a re...

CVE-2018-7520

Geutebruck CVE-2018-7520 affects G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (3.15.1). The root cause is improper access control, enabling full configuration download (including passwords) and, per public advisories and exploit records, remote command execution via the /uapi-cgi/vie...

Geutebruck IP Cameras Remote Code Execution Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A remote code execution vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to execute arbitrary code...

Geutebruck IP Cameras Cross-Site Request Forgery Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A cross-site request forgery vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to add unauthorized users to the system...

Geutebruck IP Cameras Cross-Site Scripting Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A cross-site scripting vulnerability exists in Geutebruck IP Cameras, which can be exploited by remote attackers to execute arbitrary code...

Geutebruck IP Cameras SQL Injection Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A SQL injection vulnerability exists in Geutebruck IP Cameras, which allows attackers to exploit the vulnerability to alter stored data...

Master IP CAM 01 - Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version:...

Master IP CAM 01 - Multiple Vulnerabilities

Master IP CAM 01 - Multiple Vulnerabilities Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CV...

Master IP CAM 01 - Multiple Vulnerabilities

Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CVE: CVE-2018-5723, CVE-2018-5724,...

Master IP CAM 01 Hardcoded Password / Unauthenticated Access

Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CVE: CVE-2018-5723, CVE-2018-5724,...

qviadashcam.net XSS vulnerability

Open Bug Bounty ID: OBB-488655 Description| Value ---|--- Affected Website:| qviadashcam.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fake Santa Surveillance Camera

Reka makes a "decorative Santa cam," meaning that it's not a real camera. Instead, it just gets children used to being under constant surveillance. Our Santa Cam has a cute Father Christmas and mistletoe design, and a red, flashing LED light which will make the most logical kids suspend their...

RPi Cam Control Detection

Detects the installed version of RPi Cam Control. This script sends an HTTP GET request and tries to ensure the presence of RPi Cam Control SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

lsps2007.cam-content.com XSS vulnerability

Open Bug Bounty ID: OBB-454982 Description| Value ---|--- Affected Website:| lsps2007.cam-content.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

lsps2007.cam-content.com XSS vulnerability

Open Bug Bounty ID: OBB-453950 Description| Value ---|--- Affected Website:| lsps2007.cam-content.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

CVE-2017-2696

The emergdata driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter t...