CVE-2020-10858

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

CVE-2020-10858

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

Cross site request forgery (csrf)

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

CVE-2020-10858

Zulip Desktop before 5.0.0 is affected by a permission handling flaw that allows recording via the webcam and microphone. The issue arises from a missing permission request handler, enabling potential abuse without requiring user interaction. Public sources in the connected data consistently desc...

Zulip Desktop 安全漏洞

Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...

Receiver upgrade on VDA to Citrix Workspace App will cause Grey Output from Webcam

In this scenario, the VDA 7.15 CU3 comes with Receiver 4.12 in the original installation. However, due to a security concern, the Receiver needed to be updated to Citrix Workspace 1912. After the update, when using the webcam, the camera is detected, but instead of the image, only a grey field is...

Basetech Ge-131 Bt-1837836 Security Vulnerability

Basetech Ge-131 Bt-1837836 is a webcam from Basetech. A security vulnerability exists in BASETech GE-131 BT-1837836 firmware 20180921, which stems from an unprotected stored credentials vulnerability that allows a local user to obtain a streaming username and password via a SQLite file containing...

Basetech Ge-131 Bt-1837836 Security Vulnerability

Basetech Ge-131 Bt-1837836 is a webcam from Basetech. A security vulnerability exists in BASETech GE-131 BT-1837836 firmware 20180921, which stems from the presence of a plaintext transmission of sensitive information vulnerability that could disclose sensitive information transmitted between a...

Hackers deface 1000+ Israeli websites in attempt to get webcam access

By Waqas Hackers also left a warning message for Israeli agencies to be prepared for a big surprise. This is a post from HackRead.com Read the original post: Hackers deface 1000+ Israeli websites in attempt to get webcam access...

Citrix Workspace App for Mac - Webcam redirection via MS Teams (i.e. Both 32-Bit and 64-Bit)

Workspace app for MAC introduced support for HDX Webcam redirection for 64-bit apps, and hence support Teams. Older versionsdo not support MS Teams for Webcam redirection. We are currently working onTeams Optimization Packcontact your Account Manager to get access to EAR - this technology would...

Saycheese - Grab Target'S Webcam Shots By Link

Take webcam shots from target just sending a malicious link. How it works? The tool generates a malicious HTTPS page using Serveo or Ngrok Port Forwarding methods, and a javascript code to cam requests using MediaDevices.getUserMedia. The MediaDevices.getUserMedia method prompts the user for...

COVID-Themed Lures Target SCADA Sectors With Data Stealing Malware

A new malware campaign has been found using coronavirus-themed lures to strike government and energy sectors in Azerbaijan with remote access trojans RAT capable of exfiltrating sensitive documents, keystrokes, passwords, and even images from the webcam. The targeted attacks employ Microsoft Word...

Unauthorized Access Vulnerability in PoE Infrared Webcam of P&L Technologies Ltd.

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. TP-LINK's PoE infrared webcam has an unauthorized access vulnerability, which can be exploited by attackers to directly steal real-time video streams by constructing usernames and passwords at...

Apple Safari Flaws Enable One-Click Webcam Access

A security researcher has disclosed vulnerabilities in Apple’s Safari browser that can be used to snoop on iPhones, iPads and Mac computers using their microphones and cameras. To exploit the flaws in a real-world attack, all an attacker would need to do is convince a victim to click one maliciou...

A Hacker Found a Way to Take Over Any Apple Webcam

The Safari vulnerabilities have been patched, but they would have given an alarming amount of access...

CVE-2014-8338

Cross-site scripting XSS vulnerability in vwrooms/js/jsor-jcarousel/examples/specialtextscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary web script or HTML via a URL to a crafted SVG file in the feed parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in vwrooms/js/jsor-jcarousel/examples/specialtextscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary web script or HTML via a URL to a crafted SVG file in the feed parameter...

CVE-2014-8338

CVE-2014-8338 – details available Affected software: VideoWhisper Webcam plugins for Drupal 7.x, specifically the file vwrooms/js/jsor-jcarousel/examples/special_textscroller.php. Vulnerability: Cross-site Scripting (XSS) via a crafted SVG file supplied in the feed parameter. The vulnerability or...

CVE-2014-8338

Cross-site scripting XSS vulnerability in vwrooms/js/jsor-jcarousel/examples/specialtextscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary web script or HTML via a URL to a crafted SVG file in the feed parameter...

OKER G232V1 Access Control Error Vulnerability

The OKER G232V1 is a webcam. An access control error vulnerability exists in the OKER G232V1 v1.03.02.20161129 release. The vulnerability stems from a network system or product not properly restricting access to resources from an unauthorized role. An attacker can exploit the vulnerability to...