Axis Communications 207W Network Camera Web Interface axis-cgi/admin/restart.cgi CSRF

No description provided by source. source: http://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, a...

Axis Network Camera 2.x And Video Server 1-3 HTTP Authentication Bypass

No description provided by source. source: http://www.securityfocus.com/bid/11011/info A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: - Axis StorePoint CD E100 CD-ROM Server...

Axis Network Camera 2.x And Video Server 1-3 virtualinput.cgi Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Other commands are also likely to work, facilitating other...

FlexWatch 3.0 AIndex.ASP Authorization Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the...

axis network camera 2.x and video server 1-3 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous user...

PanTilt Wireless Network Camera - XSS Web Vulnerabilities

Document Title: =============== PanTilt Wireless Network Camera - XSS Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=797 Release Date: ============= 2012-12-25 Vulnerability Laboratory ID VL-ID: ==================================== 7...

Stack overflow

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string argument...

CVE-2012-5306

CVE-2012-5306 affects the D-Link DCS-5605 PTZ IP Network Camera via the DcsCliCtrl.dll ActiveX control. The vulnerability is a stack-based buffer overflow in the SelectDirectory method that can be triggered by a long string argument, leading to a remote denial of service (crash) and potentially a...

The Rubik's Cube Network Camera System injection vulnerability and exploit-vulnerability warning-the black bar safety net

The Rubik's Cube Network Camera System Injection point:/news. php? action=detail&id=SQLi Using the method, the first step through the injection point to obtain the administrator account and password, the password actually is plaintext The second step, 后台地址为/admin.php,go in the admin backend tryin...

eyeMax DVR Server Detection

eyeMax DVR Server is running on this port. This service controls network cameras, typically for a CCTV network. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid47135; scriptversion"1.5";...

Linksys WVC54GCA Wireless-G '/img/main.cgi' Information Disclosure

The remote host is a Linksys WVC54GCA network camera. The version of the firmware of the remote camera contains a flaw that allows authenticated users to download the .htpasswd file from the remote host, which gives them the ability to crack the passwords of other users, including the password of...

OpenSSL 'zlib'压缩内存泄漏远程拒绝服务漏洞

BUGTRAQ ID: 31692 CVE ID：CVE-2008-1678 CNCVE ID：CNCVE-20081678 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密。 OpenSSL 'zlib'压缩库存在一个内存泄漏问题，远程攻击者可以利用漏洞消耗大量内存而对服务程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Axis Communications 2130 PTZ Network Camera 0.9.8h Axis Communications 2130 PTZ Network Camera 0.9.8g Axis Communications...

Cross site scripting

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482

CVE-2008-3482 is a cross-site scripting (XSS) vulnerability in the error page feature of Panasonic Network Cameras (BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, BB-HCM515). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Network Camera Web Server Detection

The remote web server controls a network camera. C Tenable, Inc. References: http://johnny.ihackstuff.com/ghdb.php?function=summary&cat=18 http://www.net-security.org/vuln.php?id=3288 include"compat.inc"; if description scriptid33523; scriptversion"1.40";...

Canon Network Camera Server VB100 Series vulnerable to cross-site scripting

Overview Canon Network Camera Server VB100 Series contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed in the camera server management screen. Solution None...

CVE-2007-5213

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...