CVE-2017-2805

An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send ...

CVE-2017-2830

Foscam C1 Indoor HD Camera is affected by a stack-based buffer overflow in the CGIProxy.fcgi web service. The flaw occurs while parsing multipart/form-data during a POST (usrBeatHeart/0x3001 flow); a boundary string larger than 0x100 bytes overflows a stack buffer, enabling potential code executi...

CVE-2017-2805

The CVE-2017-2805 issue affects Foscam C1 Indoor HD Camera via the webService CGIProxy.fcgi. A stack-based buffer overflow is triggered by processing HTTP requests that carry parameters (usr, pwd, cmd). Each parameter buffer is 0x40 bytes; overflowing usr/pwd/cmd can overwrite adjacent stack data...

CVE-2017-2829: Improper Limitation of a Pathname to a Restricted Directory

An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters...

CVE-2017-2828: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

CVE-2017-2831: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2830: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2805: Out-of-bounds Write

An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send ...

CVE-2017-2827: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

HD Camera - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HD Camera published at the 'play' market has multiple vulnerabilities...

HD Camera Ultimate for Android - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application HD Camera Ultimate for Android published at the 'play' market has multiple vulnerabilities...

HD Camera Ultra - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HD Camera Ultra published at the 'play' market has multiple vulnerabilities...