Sony IPELA Engine IP Camera Detection (HTTP)

HTTP based detection of Sony IPELA Engine IP Cameras. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Sony IPELA ENGINE IP Cameras Backdoor Accounts Vulnerability

Sony IPELA ENGINE IP Cameras contain multiple backdoors that, among other functionality, allow an attacker to enable the Telnet/SSH service for remote administration over the network. Other available functionality may have undesired effects to the camera image quality or other camera functionalit...

Backdoor Vulnerability in Multiple Sony IPELA ENGINE IP Cameras

SNC-CH115, SNC-CH120 and SNC-CH160 are IP camera products from Sony. A backdoor vulnerability exists in multiple Sony IPELA ENGINE IP Cameras. A remote attacker can exploit the vulnerabilities to remotely manage the camera using Telnet/SSH services to gain root access to the Linux shell, affectin...

SAP Router - Timing Attack Password Disclosure

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Router Password Timing Attack 1. Advisory Information Title: SAP Router Password Timing Attack Advisory ID: CORE-2014-0003 Advisory URL:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for...

CVE-2013-3539

CVE-2013-3539 is a CSRF vulnerability in Sony camera web interfaces (command/user.cgi) affecting models such as SNC CH140/CH180/CH240/CH280 and SNC DH140/DH140T/DH180/DH240/DH240T/DH280. The flaw lets remote attackers hijack administrator authentication to issue requests that add users. Public re...

Sony CH / DH Cross Site Request Forgery Vulnerability

Sony CH and DH series IP cameras suffer from a cross site request forgery vulnerability. 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description We have been found the next vulnerability in this devices...

Sony CH / DH Cross Site Request Forgery

=========================================================================== SONY ==================================================================== =========================================================================== 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date...

JVN#16767117 Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras

The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer overflow vulnerability triggered by the improper processing of some configuration variables. Impact A remote attacker cou...

Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC

No description provided by source. !-- Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC Camera info http://bssc.sel.sony.com/BroadcastandBusiness/DisplayModel?id=79540 SNC-P5 External API documentation...

sony-heap.txt

Sub tryMe buff = String15000, "A" viewer.PrmSetNetworkParam buff, 1 End Sub...

Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)

Sub tryMe buff = String15000, "A" viewer.PrmSetNetworkParam buff, 1 End Sub milw0rm.com 2007-06-27...

Solaris 7 (i386) : 106647-03

The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...