Command Execution Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. A command execution vulnerability exists in the DSS Safe City System of Zhejiang Dahua Technology Company Limited, which can be exploited by an attacker to execute arbitrary commands...

Video Insight Cross-Site Scripting Vulnerability

Video Insight is a video surveillance and management software designed to help organizations monitor and manage their security cameras and video surveillance systems. Video Insight has a security vulnerability that stems from the presence of a stored cross-site scripting vulnerability...

Video Insight Cross-Site Scripting Vulnerability

Video Insight is a video surveillance and management software designed to help organizations monitor and manage their security cameras and video surveillance systems. A security vulnerability exists in Video Insight that stems from the presence of a reflected cross-site scripting vulnerability...

Own Your Own Government Surveillance Van

A used government surveillance van is for sale in Chicago: So how was this van turned into a mobile spying center? Well, lets start with how it has more LCD monitors than a Counterstrike LAN party. They can be used to monitor any of six different video inputs including a videoscope camera. A...

GhostSec Claim Breaching Iranian Govt Surveillance Software Tool

By Habiba Rashid In a move that has caught global attention, the hacktivist group GhostSec announced a successful breach of the… This is a post from HackRead.com Read the original post: GhostSec Claim Breaching Iranian Govt Surveillance Software Tool...

Applying AI to License Plate Surveillance

License plate scanners arent new. Neither is using them for bulk surveillance. Whats new is that AI is being used on the data, identifying "suspicious" vehicle behavior: Typically, Automatic License Plate Recognition ALPR technology is used to search for plates linked to specific crimes. But in...

Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor

Threat actors associated with the hacking crew known as Patchwork have been spotted targeting universities and research organizations in China as part of a recently observed campaign. The activity, according to KnownSec 404 Team, entailed the use of a backdoor codenamed EyeShell. Patchwork, also...

The vulnerabilities of QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and QVR Pro video management systems are related to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerabilities of the QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and the QVR Pro video surveillance system are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...

The vulnerability of the GeoVision GV-ADR2701 video surveillance system allows a intruder to bypass security measures.

The vulnerability of the GeoVision GV-ADR2701 video surveillance system is related to errors during the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass security measures...

The NSA Is Lobbying Congress to Save a Phone Surveillance 'Loophole'

The National Security Agency has urged top lawmakers to resist demands that it obtain warrants for sensitive data sold by data brokers...

60,000 Androids have stalkerware-type app Spyhide installed

Stalkerware-type app Spyhide is coded so badly that its possible to gain access to the back-end databases and retrieve data about everyone that has the app on their device. And it's not a small number. Hacktivist maia arson crimew told TechCrunch she'd found 60,000 compromised Android devices,...

Apple Threatens to Pull iMessage and FaceTime from U.K. Amid Surveillance Demands

Apple has warned that it would rather stop offering iMessage and FaceTime services in the U.K. than bowing down to government pressure in response to new proposals that seek to expand digital surveillance powers available to state intelligence agencies. The development, first reported by BBC News...

CVE-2023-3805

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

CVE-2023-3805

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

Authorization

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

CVE-2023-3805

CVE-2023-3805 affects Xiamen Four Letter Video Surveillance Management System (up to 20230712). The vulnerability is in the Login component, specifically the UserInfoAction.class library, causing improper authorization. It allows remote exploitation and has been disclosed publicly. Several source...

CVE-2023-3805 Xiamen Four Letter Video Surveillance Management System Login UserInfoAction.class improper authorization

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

Video Surveillance Management System 授权问题漏洞

Xiamen Four-Faith Communication Technology Video Surveillance Management System is a video surveillance management system developed by Xiamen Four-Faith Communication Technology Xiamen, China. Video Surveillance Management System is a video surveillance management system from Xiamen Four-Faith...

Amazon in-van delivery driver footage makes its way online

Footage from technology used to monitor Amazon delivery drivers is leaking onto the internet. AI-enabled equipment which keeps an eye on the drivers speed, location, and other activities is part of the growing trend of workplace surveillance. In theory where drivers are concerned it could flag a...

Hikvision Hybrid SAN Ds-a71024 SQL Injection

Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Vendor Homepage: https://www.hikvision.com Software Link: N/A Refence Link: https://cve.report/CVE-2022-28171 Version: Filmora 12: Ds-a71024...