Apexis IP CAM - Information Disclosure

Exploit Title: Apexis IP CAM - Full Info Disclosure Google Dork: inurl:"getstatus.cgi"cgi-bin/ Date: 01/06/2015 Exploit Author: Sunplace Solutions - Soluciones Informáticas - RE Remoteexecution.net Vendor Homepage: http://www.apexis.com.cn/ Tested on: Linux Models Afected : APM-H602-MPC...

Apexis IP CAM Username / Password Disclosure

http://pastebin.com/AJ9eQvXc Exploit Title: Apexis IP CAM - Full Info Disclosure Google Dork: inurl:"getstatus.cgi"cgi-bin/ Date: 01/06/2015 Exploit Author: Sunplace Solutions - Soluciones Informáticas - RE Remoteexecution.net Vendor Homepage: http://www.apexis.com.cn/ Tested on: Linux Exploit Co...

Denial of Service Vulnerability in Various Y-Cam Products

Y-Cam camera is a wireless network security surveillance camera system from Y-cam. A denial-of-service vulnerability exists in several Y-Cam products, which allows remote, authenticated users to exploit the vulnerability to cause a denial of service...

Y-Cam information leakage vulnerability in various products

Y-Cam camera is a wireless network security surveillance camera system from Y-cam. An information disclosure vulnerability exists in several Y-Cam products, allowing remote attackers to authenticate and obtain sensitive information via a leading "/ /" to en/account/acceditasp request...

Cross-site Scripting Vulnerabilities in Various Y-Cam Products

Y-Cam camera is a wireless network security surveillance camera system from Y-cam. Multiple cross-site scripting vulnerabilities exist in several Y-Cam products, which can be exploited by remote, authenticated users to inject arbitrary web script or HTML...

CVE-2014-1902

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

CVE-2014-1901

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

Authentication flaw

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

Authentication flaw

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1900

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1901

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1902

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

CVE-2014-1901

CVE-2014-1901 affects Y-Cam camera models and ranges (firmware 4.30 and earlier). The vulnerability allows remote authenticated users to cause a denial of service (reboot) by sending malformed parameters to en/store_main.asp, en/account/accedit.asp, or en/smtpclient.asp. Note: the issue can be ex...

CVE-2014-1902

CVE-2014-1902 covers multiple XSS vulnerabilities in Y-Cam cameras (SD range YCB003/YCK003/YCW003; S range YCB004/YCK004/YCW004; EyeBall YCEB03; Bullet VGA YCBL03/YCBLB3; Bullet HD 720 YCBLHD5; Classic YCB002/YCK002/YCW003; Original YCB001/YCW001), all affected by firmware 4.30 and earlier. The i...

CVE-2014-1900

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1900

CVE-2014-1900 affects multiple Y-Cam models (SD, S, EyeBall, Bullet, Classic, Original ranges) with firmware 4.30 and earlier. The issue allows remote attackers to bypass authentication and obtain sensitive information by sending a request to en/account/accedit.asp with a leading "./" sequence in...

Oracle.com Cross Site Scripting

Exploit Title: Oracle.com sub-domain Reflected Cross-Site Scripting RXSS Date: 04/04/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.oracle.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: Oracle.com dne sub-domain Oracle description :...

Cisco PVC IP Cam Information Disclosure

Cisco PVC IP Cam is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3051

The Internet Service Monitor ISM agent in IBM Tivoli Composite Application Manager ITCAM for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof...