D-Link DCS700l Sub 4298C0 Function Arbitrary Command Execution

The vulnerability of the sub4298C0 function in D-Link DCS700l microprogrammed camera software is related to the lack of measures taken to neutralize special elements during the processing of the LightSensorControl parameter. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2024-49833

Memory corruption can occur in the camera when an invalid CID is used...

Avigilon VideoIQ iCVR HD Path Traversal

The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

DynDNS NO-IP Man-in-the-Middle

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision involves the transmission of confidential information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to carry out a...

QNAP Systems QUSBCam2 Operating System Command Injection Vulnerability

QNAP Systems QUSBCam2 is an application from QNAP Systems, Inc. allows the use of a USB webcam as a remotely manageable IP ONVIF camera for cheaper and easier deployment of surveillance systems in the home or small office. The QNAP Systems QUSBCam2 version 2.0.x vulnerability stems from the...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

Information disclosure

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

PT-2023-13341

Name of the Vulnerable Software and Affected Versions Biltema IP and Baby Camera Software version v124 Description The issue concerns insecure direct object references IDOR in the web server, allowing attackers to access sensitive information. Recommendations For Biltema IP and Baby Camera Softwa...

CVE-2022-34138

CVE-2022-34138 describes an insecure direct object reference (IDOR) in the web server of Biltema IP and Baby Camera Software version v124. The vulnerability allows an attacker to access sensitive information via the product’s web server. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2022-34138: Authorization Bypass Through User-Controlled Key

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

Meeting Owl Pro BLE Password Selection

The vulnerability of the Bluetooth Low Energy BLE implementation of the Meeting Owl Pro camera’s microsoftware solution is related to a deficiency in processing the value "c": 10 when using the cryptographic algorithm SHA-1. Exploiting this vulnerability could allow an attacker to select password...

Owl Labs Meeting Owl Pro Preinstalled Credentials Privilege Escalation

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to activate the “tethering Mode” mode and increase their privileges...

PT-2022-14340

Name of the Vulnerable Software and Affected Versions In-camera software affected versions not specified Description The issue is related to a possible information disclosure due to uninitialized data. This could lead to local information disclosure, with System execution privileges needed for...

Unauthorized Access Vulnerability in Yawcam

YawcamWin7 Camera Software official version is a camera capture, YawcamWin7 Camera Software easily help users to outdoor accurate live playback, and YawcamWin7 Camera Software official version can also be played on the screen for fast interception, and save it in a local file and other functions...

Accfly Wireless Security IR Camera System 720P Software Buffer Overflow Vulnerability

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...

CVE-2020-27539

Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-written HTTP parser and builder. HTTP parser has a heap buffer overflow OOB write. In default configuration camera parses responses only from HTTPS URLs from config file, so vulnerabl...

Argus Surveillance DVR 4.0.0.0 Privilege Escalation Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com...