The vulnerability of the Telnet service provided by the microprogramming software for Wi-Fi cameras from Rubetek, models RV-3406, RV-3409, and RV-3411, allows a intruder to gain unauthorized access to the RTSP and ONVIF services.

The vulnerability of the Telnet service provided by the Wi-Fi cameras of Rubetek models RV-3406, RV-3409, and RV-3411 is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to RTSP and ONFIV services. This...

Opencast 安全漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions prior to 9.6, which can be exploited by attackers to conduct denial-of-service attacks...

TikTok: Blocked user can see live video

A flaw had the potential to cause a user's live videos to be suggested to a blocked user. We thank @sandipgyawali for reporting this to our team and confirming the resolution...

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

Authentication flaw

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-2121 1.06FR, 1.06, and 1.05RU, DCS-2102 1.06FR. 1.06, and 1.05RU, which could let a malicious user obtain sensitive information...

CVE-2013-1601

CVE-2013-1601 is an information-disclosure vulnerability in D-Link IP cameras where an unauthenticated attacker can access an ASCII output of the live video stream via /md/lums.cgi. Connected sources (CoreLabs CORE-2013-0303) confirm this vulnerability alongside related CVEs (1599, 1600, 1602, 16...

CVE-2013-1600

CVE-2013-1600 is an Authentication Bypass affecting multiple D-Link IP cameras (notably DCS-2102/2121 series with firmware such as 1.05_TESCO, 1.05_RU, 1.06, 1.06_FR, etc.). The vulnerability allows remote attackers to access live video streams without authentication via HTTP by exploiting the up...

CVE-2013-1600

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-2121 1.06FR, 1.06, and 1.05RU, DCS-2102 1.06FR. 1.06, and 1.05RU, which could let a malicious user obtain sensitive information...

D-Link DCS-1130 Cross-Site Request Forgery Vulnerability (CNVD-2019-23339)

The D-Link DCS-1130 is a network camera from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1130. An attacker can exploit the vulnerability to view live video images...

CVE-2017-8409

An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed...

Default credentials

An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed...

CVE-2017-8405

An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems that the binary loads at address 0x00012CF4 a flag called "Authenticate" that indicates whether a user should be...

CVE-2017-8409

The CVE-2017-8409 issue affects the D-Link DCS-1130 network camera. A missing authentication check on a specific URL allows an attacker to view the live video feed without credentials, increasing risk given there are many affected devices. The problem is due to inconsistent access restrictions on...

CVE-2017-8409

An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed...

LiveHiddenCamera - Library Which Record Live Video And Audio From Android Device Without Displaying A Preview

Live Hidden Camera LHC is a library which record live video and audio from Android device without displaying a preview. How to use I've created a library to make it more usable. The only requirement is to add the library to your project and pass the Rtmp URL to it. Additionally you should care...

Do High Vanity Bitrates Choke Your Live OTT Service Out of the Gate?

Studies show that video consumption demand is growing faster than capacity. While capacity overhead does exist, current trends suggest that we'll see more bottlenecking on last-hop connectivity, especially with regionally targeted content. By pushing "vanity bitrates" -- those topmost speeds that...

CVE-2018-20161

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...

Code injection

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...

CVE-2018-20161

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...