CVE-2018-0662

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code...

Command Injection Vulnerability in Schneider Pelco Sarix Pro Camera set Program system.download.sd_file

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. A command injection vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.download.sdfile, which can be exploited by an attacker to execute arbitrary commands in the background via an http...

CVE-2018-7516

A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans...

Arbitrary File Download Vulnerability in the Pelco Sarix Pro Webcam ssldownload.cgi Program

pelco Sarix Professional is a video camera. An arbitrary file download vulnerability exists in the pelco Sarix Pro network camera ssldownload.cgi program. The vulnerability is caused due to the program failing to properly check the path and name of the downloaded file, allowing an attacker to...

A week in security (November 13 – November 19)

Last week, we gave you some tips for the inevitable online chaos that is Cyber Monday, explained how "trusted" root certificates can sometimes be anything but, and explored the strange world of catphishing. We also pulled apart some malware found on Google Play and laid out the specifics of the...

Android Qualcomm Camera elevation of privilege vulnerability (CNVD-2017-34667)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Camera is a camera program developed by Qualcomm. Qualcomm Camera is a camera program developed by Qualcomm...

Google Android Qualcomm Camera Privilege Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Camera is a camera program developed by Qualcomm. Qualcomm Camera is a camera program developed by Qualcomm...

Google Android system (camera) elevation of privilege vulnerability

Android is a free and open-source Linux-based operating system for mobile devices such as smartphones and tablets, led and developed by Google Inc. and the Open Handset Alliance. A security vulnerability exists in the Android system camera that allows remote attackers to exploit the vulnerability...

CVE-2017-0822

An elevation of privilege vulnerability in the Android system camera. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63787722...

Google Android Qualcomm Camera Driver Remote Code Execution Vulnerability (CNVD-2017-31668)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Camera driver is a camera driver developed by Qualcomm. A remote code execution vulnerability exists in the Qualcomm Camera driver in Android. A remote attacker c...

CVE-2017-8268

In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read...

Unauthorized Access Vulnerability in Shenzhen Yellow River Digital Histream Product Network Camera

Histream Network Camera provides customers with complete network video surveillance products and total solutions. Shenzhen Yellow River digital Histream products network camera has unauthorized access vulnerability, attackers can use the vulnerability to directly obtain the management user name a...

The vulnerability of the Android operating system’s camera function, allowing a intruder to trigger a service failure

The vulnerability of the Android operating system’s camera function is caused by buffer overflow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2017-8238

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function...

Dahua Technology Camera Products Unauthorized Access Vulnerability

DH-IPC-HDW23A0RN-ZS, DH-IPC-HFW13A0SN-W, DHI-HCVR51A04HE-S3 are some of the many camera products from Dahua Technology. The unauthorized access vulnerability exists in Dahua's camera products, which allows an attacker to access the user database of a camera product with non-administrator...

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the Qualcomm Camera operating system for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

D-Link DCS Series Cameras - Insecure Crossdomain

Exploit Title: Insecure CrossDomain.XML in D-Link DCS Series Cameras Date: 22/02/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-933L with firmware version 1.03. Other...

CVE-2016-6739

An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Androi...

XXE External Entity Injection Vulnerability in Hikvision Elisa Live IP camera

Hangzhou Hikvision Digital Technology Co. Elisa Live IP camera is a network camera. Hikvision Elisa Live IP camera suffers from XXE external entity injection vulnerability. An attacker can exploit the vulnerability to obtain arbitrary files on a website, and in severe cases, obtain server control...

Android Camera elevation of privilege vulnerability (CNVD-2016-09553)

Android is an open source operating system based on Linux. A security vulnerability in the camera/src/camerametadata.c file in Android's Camera service allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...