Vivotek IB8367A 命令注入漏洞

Vivotek IB8367A is a network camera from China VIVOTEK Communications Vivotek. The Vivotek IB8367A VVTK-0100b suffers from a command injection vulnerability that stems from the parameter QUERYSTRING in the file uploadfile.cgi that can lead to command injection...

CVE-2024-32753

Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions prior to 3.5.0 third-party component...

Johnson Controls Illustra Pro Gen 4 Security Vulnerability

Johnson Controls Illustra Pro Gen 4 is a series of surveillance probes from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Illustra Pro Gen 4 Camera SS016.05.03.01.0010 and prior versions, which stems from a dependency on vulnerable third-party components...

Hanwha Vision Camera Security Vulnerability

Hanwha Vision Camera is a series of cameras from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision Camera that stems from allowing unauthenticated DoS attacks on the camera...

CVE-2024-35342

Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280,...

D-Link DCS-8300LHV2 安全漏洞

D-Link DCS-8300LHV2 is a webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-8300LHV2 that stems from a ONVIF SetHostName stack-based buffer overflow remote code execution vulnerability...

PT-2024-14884 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: A flaw has been discovered that allows for remote code execution on the camera. An attacker could inject malicious code into HTTP request packets to execute arbitrary code. The estimated...

The vulnerability of the Trivision-NC-227WF IP camera’s microprogramming software lies in the escape from buffer boundaries into memory. This allows a intruder to execute arbitrary code, gain unauthorized access to protected information, or cause service failure.

The vulnerability of the Trivision-NC-227WF IP camera’s microprogramming software is related to the escape operation from the buffer in memory when processing the basic parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code, gain unauthorized access to protected...

The vulnerability of the API configuration of D-Link’s ONVIF micro-programmed Wi-Fi cameras series DCS-8300LHV2 allows a intruder to bypass the authentication process.

The vulnerability of the ONVIF configuration of D-Link’s DCS-8300LHV2 Wi-Fi camera software lies in the deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

TRENDnet TV-IP1314PI Command Injection Vulnerability

The TRENDnet TV-IP1314PI is a wireless network camera from TRENDnet. The TRENDnet TV-IP1314PI suffers from a command injection vulnerability, which originates from davinci's use of the system function to unpack language packets without strict filtering of URL strings, which can be exploited by an...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from a camera extension that may be able to access the camera view from an application other than the one to which permission has be...

Bosch IP cameras security breach

Bosch IP cameras are network cameras from Bosch, Germany. A security vulnerability exists in Bosch IP cameras that could allow a user with administrative privileges to run arbitrary commands on the camera's operating system. The following products and versions are affected: Bosch Camera CPP13...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets due to a memory corruption in the camera when installing fd for a specific DMA buffer...

CVE-2023-5037

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...

PT-2023-31538 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: A flaw has been discovered that allows for authenticated command injection on the camera. An attacker could inject malicious data into request packets to execute commands. Recommendations: A...

Zavio CF Series IP Camera Buffer Error Vulnerability

Zavio CF Series is a series of webcams from Zavio. A security vulnerability exists in the Zavio CF Series IP Camera that stems from not adequately checking or validating the allocated buffer size. An attacker could exploit the vulnerability to remotely execute arbitrary code. The following produc...

VulnCheck KEV: CVE-2021-33549

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2023-30730

Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices, which originates from an implicit intent hijacking vulnerability in Camera...

Milesight 授权问题漏洞

Milesight is a complete artificial intelligence video surveillance solution from China-based Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5, which stems from a vulnerability that allows authentication to be bypassed via an unspecified method...