CVE-2024-28237 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

CVE-2024-28237 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

Impact OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute...

GHSA-X7MF-WRH9-R76C XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

Impact OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute...

OctoPrint Security Vulnerability

OctoPrint is an application. that provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in OctoPrint 1.9.3 and prior versions that originated from allowing a malicious administrator to configure or convince a victim with administrator privileges to...

PT-2024-22352 · Octoprint · Octoprint

Name of the Vulnerable Software and Affected Versions: OctoPrint versions up to and including 1.9.3 Description: OctoPrint provides a web interface for controlling consumer 3D printers. The issue allows malicious admins to configure or talk a victim with administrator rights into configuring a...

[SECURITY] Fedora 40 Update: cambozola-0.936-24.fc40

Cambozola is a very simple cheesy! viewer for multipart jpeg streams that are often pumped out by a streaming webcam server, sending over multiple images per second...

kernel: memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c

A flaw memory leak in the Linux kernel webcam device functionality was found in the way user calls ioctl that triggers videousercopy function. The highest threat from this vulnerability is to system availability...

AXIS M3024 Code Injection Vulnerability

AXIS M3024 is a webcam from Axis Sweden. The AXIS M3024 suffers from a code injection vulnerability that stems from the VAPIX API tcptest.cgi not having sufficient input validation, allowing remote code execution...

Webcam redirection in double hop is not working

Webcam is not working anymore in a double hop scenario. If the first hop VDA is 1912CU3 webcam redirects fine. However if first hop VDA is CVAD 1912 CU8 VDA then webcam redirection fails. With https://webcamtests.com/ when clicking on "Test my cam" an error is seen. "Your webcam is being used or...

webcam-map.com Improper Access Control vulnerability OBB-3815584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2021-30168

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...

Unitree Robotics A1 Security Breach

Unitree Robotics A1 is a quadrupedal robot from Chinese company Unitree Robotics. A security vulnerability exists in Unitree Robotics A1 version 1.16, which stems from a lack of authentication and allows a local attacker to use a web server to view through a webcam...

TP-LINK Tapo C100 安全漏洞

TP-LINK Tapo C100 is a webcam device from China P&L TP-LINK. The TP-LINK Tapo C100 suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by an attacker to cause a denial of service DoS by serving a crafted web request...

Webcam name formats in ICA session

Summarize the webcam name formats in ICA session of single session Windows OS...

Issue with webcams displaying a green screen when using "Media Foundation" encoding.

Using "Media Foundation" encoding causes green screen issues with webcams...

webcam.treffiagat.fr Cross Site Scripting vulnerability OBB-3512281

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ELECOM WRH 输入验证错误漏洞

ELECOM WRH is a webcam for the home from ELECOM Japan. An input validation error vulnerability exists in ELECOM WRH-300WH-H v2.12 and earlier versions, which stems from the presence of an open redirection, where a user of a website using the affected product may be redirected to an arbitrary...

ELECOM WRH 跨站脚本漏洞

ELECOM WRH is a webcam for home use from ELECOM Japan. A security vulnerability exists in ELECOM WRH-300WH-H v2.12 and earlier versions, which stems from the presence of cross-site scripting that can be exploited by an attacker to execute arbitrary scripts on a logged-in user's web browser...

Airspace CCTV Camera 安全漏洞

Airspace CCTV Camera is a webcam from Airspace. A security vulnerability exists in Airspace CCTV Camera. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...