The vulnerability of the sub_4298C0() function in D-Link DCS700l microprogrammed camera software allows a intruder to execute arbitrary commands.

The vulnerability of the sub4298C0 function in D-Link DCS700l microprogrammed camera software is related to the lack of measures taken to neutralize special elements during the processing of the LightSensorControl parameter. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2024-49833

Memory corruption can occur in the camera when an invalid CID is used...

The vulnerability of the Microprogrammed Software for the Avigilon VideoIQ iCVR HD camera, related to incorrect restrictions on the path name to the restricted access directory, allows a violator to disclose protected information.

The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision involves the transmission of confidential information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to carry out a...

QNAP Systems QUSBCam2 Operating System Command Injection Vulnerability

QNAP Systems QUSBCam2 is an application from QNAP Systems, Inc. allows the use of a USB webcam as a remotely manageable IP ONVIF camera for cheaper and easier deployment of surveillance systems in the home or small office. The QNAP Systems QUSBCam2 version 2.0.x vulnerability stems from the...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

Information disclosure

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2022-34138

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

CVE-2022-34138

CVE-2022-34138 describes an insecure direct object reference (IDOR) in the web server of Biltema IP and Baby Camera Software version v124. The vulnerability allows an attacker to access sensitive information via the product’s web server. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2022-34138: Authorization Bypass Through User-Controlled Key

Insecure direct object references IDOR in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information...

The vulnerability of the Bluetooth Low Energy (BLE) implementation of the camera software for video conferencing, Meeting Owl Pro, allows a intruder to select passwords.

The vulnerability of the Bluetooth Low Energy BLE implementation of the Meeting Owl Pro camera’s microsoftware solution is related to a deficiency in processing the value "c": 10 when using the cryptographic algorithm SHA-1. Exploiting this vulnerability could allow an attacker to select password...

The vulnerability of Owl Labs Meeting Owl Pro’s microprogramming software, related to the use of pre-installed credentials, allows a hacker to activate the “tethering Mode” and increase their privileges.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to activate the “tethering Mode” mode and increase their privileges...

Unauthorized Access Vulnerability in Yawcam

YawcamWin7 Camera Software official version is a camera capture, YawcamWin7 Camera Software easily help users to outdoor accurate live playback, and YawcamWin7 Camera Software official version can also be played on the screen for fast interception, and save it in a local file and other functions...

Accfly Wireless Security IR Camera System 720P Software 缓冲区错误漏洞

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...

CVE-2020-27539

Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-written HTTP parser and builder. HTTP parser has a heap buffer overflow OOB write. In default configuration camera parses responses only from HTTPS URLs from config file, so vulnerabl...

Argus Surveillance DVR 4.0.0.0 SYSTEM Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com Product Argus...

Argus Surveillance DVR 4.0.0.0 Privilege Escalation Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com...

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera, related to the use of pre-set credentials, allows a intruder to gain access to the device.

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera is related to the use of pre-set credentials. Exploiting this vulnerability can allow a remote attacker to gain access to the device...