INSTAR 2K+和INSTAR 4K 安全漏洞

INSTAR 2K+ and INSTAR 4K are both webcams from INSTAR, a German company. A security vulnerability exists in INSTAR 2K+ and INSTAR 4K version 3.11.1 Build 1124, which originates in the Backend IPC Server component could lead to a denial of service attack...

PT-2025-32555

Name of the Vulnerable Software and Affected Versions: Lenovo 510 FHD Webcam versions prior to 4.8.0 Lenovo Performance FHD Webcam versions prior to 4.8.0 Description: Linux webcams can be compromised and become a persistent malware vector. The flaw allows for re-infection even after an operating...

Drone Detection with Event Cameras

The diffusion of drones presents significant security and safety challenges. Traditional surveillance systems, particularly conventional frame-based cameras, struggle to reliably detect these targets due to their small size, high agility, and the resulting motion blur and poor performance in...

Bitdefender Warns Users to Update Dahua Cameras Over Critical Flaws

Security researchers at Bitdefender have found two critical vulnerabilities CVE-2025-31700, CVE-2025-31701 in popular Dahua security cameras, including the Hero C1 model...

The vulnerability of the generate_pass_from_mac function in D-Link DCS-6517 and DCS-7517 microprogrammed camera software allows a intruder to compromise the confidentiality of the protected information.

The vulnerability of the generatepassfrommac function in D-Link DCS-6517 and DCS-7517 microprogrammed camera software is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality of the protected information...

The vulnerability of the setSystemWizard() and setSystemControl() functions in D-Link DCS-932L IP camera software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setSystemWizard and setSystemControl functions in D-Link DCS-932L IP cameras exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Dahua IPC Series 安全漏洞

Dahua IPC Series is a series of network cameras from Dahua China. A security vulnerability exists in the Dahua IPC Series that originates from a buffer overflow that could result in service interruption or remote code execution...

“Ring cameras hacked”? Amazon says no, users not so sure

In the last week, countless Amazon Ring users on TikTok, Reddit, and X have been saying they believe their Ring cameras were hacked starting May 28. Many posted screenshots of their accounts, showing multiple unauthorized device logins, making these claims hard to ignore. Forbes looked into the...

Teledyne FLIR FB-Series O和Teledyne FLIR FH-Series ID 注入漏洞

The Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID are both a series of thermal imaging cameras from Teledyne FLIR USA. An injection vulnerability exists in Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID version 1.3.2.16, which stems from command injection due to misbehavior o...

Teledyne FLIR FB-Series O和Teledyne FLIR FH-Series ID 安全漏洞

The Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID are both a series of thermal imaging cameras from Teledyne FLIR USA. A security vulnerability exists in Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID version 1.3.2.16, which stems from the use of hard-coded passwords...

CVE-2025-53168

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness...

CVE-2025-53169

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness...

CVE-2025-53169

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness...

CVE-2025-53168

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness...

CVE-2025-53168

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness...

CVE-2025-53168

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness...

CVE-2025-34052

An unauthenticated information disclosure vulnerability exists in AVTECH IP cameras, DVRs, and NVRs via Machine.cgi?action=getcapability. Sensitive internal device information such as firmware version, MAC address, and codec support can be accessed without authentication...

CVE-2025-34066

An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...

Surveillance Used by a Drug Cartel

Once you build a surveillance system, you can't control who will use it: A hacker working for the Sinaloa drug cartel was able to obtain an FBI official’s phone records and use Mexico City’s surveillance cameras to help track and kill the agency’s informants in 2018, according to a new US justice...

The vulnerability of Selea Targa IP cameras’ microprogramming software, related to insufficient validation of input data, allows a intruder to carry out an SSRF attack.

The vulnerability of Selea Targa IP cameras’ microprogramming software is related to insufficient validation of input data during the processing of the ipnotifyaddress and url parameters. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack by sending specially crafted...