CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

Teledyne FLIR FLIR-DVTEL camera 安全漏洞

Teledyne FLIR FLIR-DVTEL camera is a series of camera surveillance devices from Teledyne FLIR USA. A security vulnerability exists in Teledyne FLIR FLIR-DVTEL camera that originates from an attacker being able to remotely execute arbitrary code via a crafted request to the device's administration...

CVE-2023-0349 CVE-2023-0349

The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera...

Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G 跨站脚本漏洞

PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G is a camera from PLANEX. A security vulnerability exists in the Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G that stems from a stored cross-site scripting vulnerability, which can be exploited by an authenticated attacker in a...

The vulnerability of Moxa VPORT 06EC-2V IP camera software and Moxa VPort 461A video encoder software lies in the reading of data beyond the buffer in memory. This allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of Moxa VPORT 06EC-2V microprogrammed software for IP cameras and the Moxa VPort 461A microprogrammed software for video encoders lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Huawei HarmonyOS 授权问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability. An attacker exploited the vulnerability to render the camera and microphone unusable...

The vulnerability of the SetDdns-domain component in the Reolink RLC-410W camera’s microprogramming system allows a intruder to execute arbitrary commands.

The vulnerability of the SetDdns-domaind component in the Reolink RLC-410W video camera software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

The vulnerability of the /ptipupgrade.cgi component of the network camera software for video surveillance devices like ISnex HC-IP9100HD and ISnex HC-IP9050HD allows a intruder to gain full access to the device.

The vulnerability of the /ptipupgrade.cgi component of the ISnex HC-IP9100HD and ISnex HC-IP9050HD network camera microprogramming software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain full access to the device through a specially...

Digital Watchdog DW MEGApix IP 授权问题漏洞

Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP cameras version A7.2.220211029, which stems from a vulnerability that allows an attacker to access core log files and perform session hijacking via a crafted session...

Cellinx NVT IP PTZ 安全漏洞

Cellinx NVT IP PTZ is a camera device from Cellinx Korea. A security vulnerability exists in Cellinx NVT IP PTZ, where an attacker can elevate web access to administrative privileges and allow changes to various camera configurations by modifying the following cookie values "isadmin", "showConfig...

CVE-2021-40149

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI...

CVE-2022-33712

Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S12 allows attacker to get sensitive information...

Netwave IP camera 安全漏洞

Netwave IP camera is a webcam from Netwave. A security vulnerability exists in Netwave IP camera, which originates from a memory dump issue in //proc/kcore. An unauthenticated attacker can use this vulnerability to steal sensitive information from the network configuration...

CVE-2022-20096

In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06419003; Issue ID: ALPS06419003...

MediaTek 多款产品安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek component camera, which originates from uninitialized data and can be exploited by an attacker to cause a local information disclosure. The following products and...

CVE-2022-23998

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R11, 10.5.03.77 in Android Q10 and 9.0.6.68 in Android P9 allows untrusted applications to take a picture in screenlock status...

Pixel Update Bulletin—February 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2022-02-05 or later address all issues in this bulletin and all issues in the February 2022 Android...

Reolink Rlc-410W 操作系统命令注入漏洞

Reolink Rlc-410W is a Wifi security camera from Reolink China.The device network settings feature of Reolink RLC-410W v3.0.0.13620121102 is vulnerable to OS command injection, which can be triggered by an attacker by sending an HTTP request to execute arbitrary commands...

Reolink Rlc-410W 输入验证错误漏洞

Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W version v3.0.0.13620121102 contains a security vulnerability that can be exploited by attackers to cause a reboot via a compiled HTTP request...

Reolink Rlc-410W 输入验证错误漏洞

Reolink Rlc-410W is a Wifi security camera from Reolink China.A security vulnerability exists in Reolink RLC-410W, which can be exploited by attackers to cause a reboot via a crafted HTTP request...