DEBIAN-CVE-2019-11748

WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...

1-Click iPhone and Android Exploits Target Tibetan Users via WhatsApp

A team of Canadian cybersecurity researchers has uncovered a sophisticated and targeted mobile hacking campaign that is targeting high-profile members of various Tibetan groups with one-click exploits for iOS and Android devices. Dubbed Poison Carp by University of Toronto's Citizen Lab, the...

Mozilla: Persistence of WebRTC permissions in a third party context

WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...

UBUNTU-CVE-2019-11748

WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the...

D-Link DCS-1100 and D-Link DCS-1130 Buffer Error Vulnerability

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A buffer error vulnerability exists in RTSPD in the D-Link DCS-1100 and DCS-1130. An attacker could use this vulnerability to take full control of the device and view images captured by the...

CVE-2019-5281

There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155C185R1P2. When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations...

The vulnerability of the microprogramming software used in Pelco Sarix Enhanced and Spectra Enhanced cameras arises from insufficient verification of the authenticity of the requests being sent. This allows intruders to gain access to the camera’s interface.

The vulnerability of the microprogramming software used in Pelco Sarix Enhanced and Spectra Enhanced cameras is related to insufficient verification of the authenticity of the requests being sent. Exploiting this vulnerability can allow a intruder to gain access to the camera through a specially...

Code injection

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

TOOL UPDATE: Cameradar v2.1.0

PenTestIT RSS Feed My initial post covering this open source Real Time Streaming Protocol RTSP surveillance camera access multi-tool was about an older version - Cameradar v2.0.0. A lot has happened since then and an update – Cameradar v2.1.0 was made available by the author. This version comes...

About the security content of iOS 12

About the security content of iOS 12 This document describes the security content of iOS 12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

Microsoft Windows: Prevent enabling lock screen camera

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincplockscreencamera.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent enabling lock screen camera Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

InvisiMole Burrows into Targets with Rich Espionage Tools

Researchers are expressing concern over a versatile spyware called InvisiMole that has been spotted in highly targeted campaigns targeting Windows PCs in Russia and the Ukraine. The malicious code, which comes in 32-bit and 64-bit versions, has a modular architecture, with two different,...

All New Privacy and Security Features Coming in macOS 10.14 Mojave

At Worldwide Developer Conference 2018 on Monday, Apple announced the next version of its macOS operating system, and it's called Mojave. Besides introducing new features and improvements of macOS 10.14 Mojave—like Dark Mode, Group FaceTime, Dynamic Desktop, and Finder—at WWDC, Apple also reveale...

Code injection

Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams...

CVE-2018-6301

Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams...

CVE-2018-6301

CVE-2018-6301 affects Hanwha Techwin Smartcam (cloud-based SmartCam) with an arbitrary access and monitoring vulnerability via the cloud. Connected sources describe multiple issues: undocumented functionality that allows web interface manipulation and a buffer overflow, insecure HTTP during firmw...

iPhone apps can access cameras to secretly take photos and record videos

By Waqas There was a time when Apple devices were considered secured This is a post from HackRead.com Read the original post: iPhone apps can access cameras to secretly take photos and record videos...