Foscam Information Disclosure Vulnerability

Foscam is a smart webcam that allows for all-around monitoring of movement, sound, and temperature, and can push messages to your phone, as well as features such as mobile viewing and one-click sharing. Foscam suffers from an information disclosure vulnerability that allows an attacker to craft a...

Foscam Command Injection Vulnerability

Foscam is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A command injection vulnerability exists in the Foscam mail.htm page that allows an attacker to inject a command into the Receiver1 field in a form that can be executed with roo...

CVE-2017-5674

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

Cross site request forgery (csrf)

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

Command injection

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

CVE-2017-5675

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

CVE-2017-5675

The CVE-2017-5675 issue affects a custom GoAhead web server used in Foscam, Vstarcam, and multiple white-label IP cameras. The mail.htm page’s mail-sending form allows an attacker to inject a command into the receiver1 field, which is then executed with root privileges. The vulnerability is trigg...

CVE-2017-5674

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

CVE-2017-5674: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

PT-2017-16664

Name of the Vulnerable Software and Affected Versions Foscam, Vstarcam, and multiple white-label IP camera models affected versions not specified Description A vulnerability in a custom-built GoAhead web server allows an attacker to craft a malformed HTTP request, such as "GET system.ini HTTP/1.1...

PT-2017-16665

Name of the Vulnerable Software and Affected Versions Foscam, Vstarcam, and multiple white-label IP camera models affected versions not specified Description A command-injection issue exists in the web application on custom-built GoAhead web servers used by the affected IP camera models...

CVE-2017-5675: Improper Neutralization of Special Elements used in a Command

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

Foscam Viewer - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Foscam Viewer published at the 'play' market has multiple vulnerabilities...

Foscam - Customized SSL, Exported ContentProvider, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Foscam published at the 'play' market has multiple vulnerabilities...

Foscam IP camera viewer - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Foscam IP camera viewer published at the 'play' market has multiple vulnerabilities...

CVE-2014-1849

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...

Code injection

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...

CVE-2014-1849

CVE-2014-1849 affects Foscam IP cameras (e.g., 11.37.2.49 and other versions) where the DynDNS option generates credentials from predictable camera subdomain names, enabling remote attackers to spoof or hijack cameras and modify camera records on the Foscam DNS server. Impact per NVD indicates co...

PT-2014-4328

Name of the Vulnerable Software and Affected Versions Foscam IP camera versions 11.37.2.49 and other versions Description The issue allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam DNS server. This is possib...

CVE-2014-1849: Undefined Security Weakness

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...