CVE-2021-44458

CVE-2021-44458 affects Lens (versions 5.2.6 and earlier). The root cause is lack of websocket authentication, allowing a malicious website to cause the victim's browser to connect to Lens and operate the local terminal, enabling arbitrary commands to be executed as the Lens user (remote code exec...

Lens 访问控制错误漏洞

Lens is a distribution of the OpenLens repository that contains Team Lens-specific customizations released under a legacy EULA. An authorization issue vulnerability exists in Lens that stems from a lack of websocket authentication leading to remote code execution when accessing a malicious websit...

CVE-2021-44458: Improper Authentication

Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker to execute arbitrary commands as the...

PT-2022-12122 · Lens · Lens

Name of the Vulnerable Software and Affected Versions: Lens versions 5.2.6 and earlier Description: The issue allows attackers to execute arbitrary commands as the Lens user by making websocket connections from the victim's browser to Lens, enabling operation of the local terminal feature, when a...

CVE-2021-23154: Improper Control of Generation of Code

In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell. Arguments can be provided which cause arbitrary shell commands to run on the system...

Lens 操作系统命令注入漏洞

Lens is a distribution of the OpenLens repository that contains Team Lens-specific customizations released under the legacy EULA. An operating system command injection vulnerability exists in versions of Lens prior to 5.3.4 that originates when a customized helm chart configuration creates a helm...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due a division by zero in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg...

DEBIAN-CVE-2020-20892

An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...

UBUNTU-CVE-2020-20892

An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...

CVE-2020-20892

An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...

Snapchat: CSRF when unlocking lenses leads to lenses being forcefully installed without user interaction

Hi, The url below allows a user to unlock a particular lens. Once they have opened the URL on their phone, Snapchat opens up and prompts the user to unlock this lens. https://www.snapchat.com/unlock/?type=SNAPCODE&uuid=6ff5a565fca249a1948b1963ee2881b4&metadata=01 By changing the value of type in...

lens-top.com Cross Site Scripting vulnerability OBB-1282553

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2019-6177 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a division by zero in the filter frame function of the libavfilter/vf lenscorrection.c component. This allows attackers to cause a Denial of Service or potentially gain access to...

August 17, 2019—KB4512534 (OS Build 17763.720)

None None...

Sensitive Information Disclosure

Augeas is a utility for editing configuration. Augeas parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native configuration files. Augeas also uses "lenses" as basic building blocks...

VIVOTEK Network Camera Command Injection Vulnerability

VIVOTEK VIVOTEK Communications Co., Ltd. is a network camera and AV server manufacturer. A command injection vulnerability exists in VIVOTEK network cameras with firmware versions lower than XXXXXX-VVTK-0X06a, which can be exploited by authenticated users to execute arbitrary commands via...

rawlingsopticians.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-665623 Description| Value ---|--- Affected Website:| rawlingsopticians.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8977

In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...

The vulnerability of the microprogrammed software of the wireless video camera Lens Peek-a-View lies in the presence of pre-set accounts, which allow a intruder to gain access to the device.

The microprogramming software of the wireless video camera Lens Peek-a-View has vulnerabilities. There are pre-installed user accounts named “admin” with the password “2601hx” for access via UART, and user accounts named “user” and “guest” with passwords “user” and “guest” respectively for access...

[SECURITY] Fedora 25 Update: augeas-1.8.1-1.fc25

A library for programmatically editing configuration files. Augeas parses configuration files into a tree structure, which it exposes through its public API. Changes made through the API are written back to the initially read files. The transformation works very hard to preserve comments and...