1184 matches found
PT-2019-6909
Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to read arbitrary files by using a .. dot dot in the URL of an HTTP GET request, indicating a directory traversal vulnerability...
PT-2019-6911
Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to obtain sensitive information, including cleartext passwords, via an HTTP GET request to the "check users.cgi" API endpoint. This can al...
PT-2019-6912
Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to obtain sensitive information, including IP addresses, firmware versions, timestamp, serial number, p2p port number, and wifi status. Th...
CVE-2013-3312: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change 1 passwords or 2 firewall configuration, as demonstrated by a request to setusers.cgi...
CVE-2013-3311: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. dot dot in the URL of an HTTP GET request...
CVE-2013-3314: Exposure of Sensitive Information to an Unauthorized Actor
The Loftek Nexus 543 IP Camera allows remote attackers to obtain 1 IP addresses via a request to getrealip.cgi or 2 firmware versions ui and system, timestamp, serial number, p2p port number, and wifi status via a request to getstatus.cgi...
CVE-2013-3313: Insufficiently Protected Credentials
The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to checkusers.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in...
iSmartViewPro 1.3.34 - Denial of Service Exploit
Exploit Title: iSmartViewPro 1.3.34 - Denial of Service PoC Discovery by: Ivan Marmolejo Vendor Homepage: http://www.smarteyegroup.com/ Software Link: https://apps.apple.com/mx/app/ismartviewpro/id834791071 Tested Version: 1.3.34 Vulnerability Type: Denial of Service DoS Local Tested on OS: iPhon...
iSmartViewPro 1.3.34 - Denial of Service (PoC)
iSmartViewPro 1.3.34 - Denial of Service PoC Exploit Title: iSmartViewPro 1.3.34 - Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019 -11-16 Vendor Homepage: http://www.smarteyegroup.com/ Software Link: https://apps.apple.com/mx/app/ismartviewpro/id834791071 Tested Version:...
iSmartViewPro 1.3.34 - Denial of Service (PoC)
Exploit Title: iSmartViewPro 1.3.34 - Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019 -11-16 Vendor Homepage: http://www.smarteyegroup.com/ Software Link: https://apps.apple.com/mx/app/ismartviewpro/id834791071 Tested Version: 1.3.34 Vulnerability Type: Denial of Service D...
iSmartViewPro 1.3.34 Denial Of Service
Exploit Title: iSmartViewPro 1.3.34 - Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019 -11-16 Vendor Homepage: http://www.smarteyegroup.com/ Software Link: https://apps.apple.com/mx/app/ismartviewpro/id834791071 Tested Version: 1.3.34 Vulnerability Type: Denial of Service D...
CVE-2019-18230
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...
CVE-2019-18382
An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...
Open redirect
An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...
CVE-2019-18382
An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...
CVE-2019-18382
AVStar PE204 3.10.70 IP cameras are affected by CVE-2019-18382. A denial of service can occur on open TCP port 23456, triggered after a TELNET connection, resulting in all TCP ports becoming closed. Connected sources (Red Hat, CVE listings, NVD) reiterate the same description. No remediation or e...
V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery
Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery Author: LiquidWorm Discovery Date: 2019-09-26 Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested on: GoAhead-Webs Advisory ID: ZSL-2019-5536 Advisory URL:...
CVE-2019-14458
VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...