CVE-2023-49515

Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components...

The vulnerability of the ONVIF application programming interface implementation in D-Link’s DCS-8300LHV2 series of Wi-Fi cameras allows a intruder to execute arbitrary code.

The vulnerability of the ONVIF application programming interface for D-Link’s DCS-8300LHV2 Wi-Fi cameras exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

3R SOLUTION Thermal camera TMC series Security Vulnerability

The 3R SOLUTION Thermal camera TMC series is a series of thermal cameras from 3R SOLUTION, Japan. A security vulnerability exists in 3R SOLUTION Thermal camera TMC series, which is caused due to insufficient technical documentation, where the user is unaware of the internally stored data and an...

D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the ONVIF API. The issue results from the u...

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

Directory traversal

FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file...

Teledyne FLIR AX8 Path Traversal Vulnerability

The Teledyne FLIR AX8 is a series of thermal surveillance cameras from Teledyne FLIR USA. The Teledyne FLIR AX8 is vulnerable to a path traversal vulnerability that stems from the presence of a path traversal vulnerability...

CVE-2023-51127

CVE-2023-51127 affects Teledyne FLIR AX8 thermal cameras (up to firmware 1.46.16). The vulnerability is a Directory Traversal due to improper access restrictions, allowing an unauthenticated, remote attacker to read arbitrary sensitive files by uploading a specially crafted symbolic-link file. Th...

CVE-2023-51127

FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file. NOTE...

23andMe Blames Users for Recent Data Breach as It's Hit With Dozens of Lawsuits

Plus: Russia hacks surveillance cameras as new details emerge of its attack on a Ukrainian telecom, a Google contractor pays for videos of kids to train AI, and more...

Pantheon - Insecure Camera Parser

Pantheon is a GUI application that allows users to display information regarding network cameras in various countries as well as an integrated live-feed for non-protected cameras. Functionalities Pantheon allows users to execute an API crawler. There was original functionality without the use of...

TP-LINK Tapo Security Breach

TP-LINK Tapo is a series of secure WiFi cameras from the Chinese company TP-LINK. A security vulnerability exists in TP-LINK Tapo versions prior to v3.1.315, which stems from incorrect access control allowing an attacker to access user credentials in plaintext...

Vietnamese Group Hacks and Sells Bedroom Camera Footage

By Waqas Cheap Security, Costly Privacy: Vietnamese Group Profits from Hacked Home Cameras by Selling Bedroom Camera Footage- Change Your Passwords Now! This is a post from HackRead.com Read the original post: Vietnamese Group Hacks and Sells Bedroom Camera Footage...

LibRaw: Heap Buffer Overflow

Background LibRaw is a library for reading RAW files obtained from digital photo cameras. Description A vulnerability has been discovered in LibRaw. Please review the CVE identifier referenced below for details. Impact A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may...

MajorDoMo Remote Code Execution

Introduction MajorDoMo, a beacon in Russian home automation and particularly favored by Raspberry Pi aficionados, has been a trusted name for over a decade. With over 380 stars on its official GitHub repository at the time of writing https://github.com/sergejey/majordomo, its popularity is eviden...

CVE-2023-39509

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera...

CVE-2023-39509

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera...

Command injection

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera...

CVE-2023-39509

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera...

CVE-2023-39509

CVE-2023-39509 is a command injection vulnerability affecting Bosch IP cameras. Affected component is the camera OS accessible to an authenticated administrator who can run arbitrary commands. Public details confirm impact on confidentiality, integrity, and availability (score 7.2, HIGH). Concret...