12 matches found
EUVD-2024-42688
Malicious code in bioql PyPI...
EUVD-2024-42689
Malicious code in bioql PyPI...
CVE-2024-47790
UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol RTSP version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed...
CVE-2024-47789
UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP...
CVE-2024-47789 Credential Leakage Vulnerability
UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP...
CVE-2024-47789
The CVE-2024-47789 entry concerns D3D Security IP Camera D8801. The vulnerability arises from a weak authentication scheme in the HTTP header protocol, where the authorization tag contains a Base-64 encoded username and password. A remote attacker could exploit this by crafting an HTTP packet, re...
CVE-2024-47789: Cleartext Transmission of Sensitive Information
UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP...
CVE-2024-47790: Missing Authorization
UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol RTSP version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed...
PT-2024-7543
Name of the Vulnerable Software and Affected Versions D3D Security IP Camera affected versions not specified Description The issue is related to the transmission of critical information in plain text, allowing a remote attacker to obtain user credentials by crafting a special HTTP packet. This is...
PT-2024-7544
Name of the Vulnerable Software and Affected Versions D3D Security IP Camera D8801 affected versions not specified Description The issue is related to the implementation of the Real-Time Streaming Protocol RTSP in the D3D Security IP Camera, which has weaknesses in its authorization procedure. Th...
CVE-2024-41623
CVE-2024-41623 affects D3D Security D3D IP Camera (D8801) with v.V9.1.17.1.4-20180428. A local attacker can execute arbitrary code via a crafted payload. The connected PT-2024-29468 report specifies exploitation details: an unauthenticated attacker can trigger the issue by fuzzing with HTTP GET r...