667 matches found
WowWee Rovio Insufficient Access Controls
SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...
SasCam Webcam Server v.2.6.5 Get() Method Buffer Overflow
The SasCam Webcam Server ActiveX control is vulnerable to a buffer overflow. By passing an overly long argument via the Get method, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the user. This control is not marked safe for scripting,...
SasCam Webcam Server ActiveX控件Get方式缓冲区溢出漏洞
BUGTRAQ ID: 33053 SasCam Webcam Server是用于从桌面或站点播放、广播视频流的工具。 Webcam Server ActiveX控件没有正确地验证对Get方式所传送的超长字符串，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可以触发缓冲区溢出，导致执行任意指令。 SaschArt SasCam WebCam Server 2.6.5 厂商补丁： SaschArt -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://soft.saschart.com/...
SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit
No description provided by source. !-- -- !--SasCam WebCam Server Version 2.6.5 Belus Technology Inc. XHTTP Module v4.1.0.0 -- !--Remote Exploit -- !--Tested in Windows XP SP2/SP3 IE 7.0 -- !--C0d3d by callAX [email protected] -- !--4lmost all methods have a b0f !-- -- !--Greetings to str0ke fo...
SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit
Exploit for unknown platform in category remote exploits ===================================================== SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit ===================================================== Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call...
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow
Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call esp User32.dll Module 77 E3 7E EC noping = String20, unescape"%90" lnj3ctc0d3 = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call esp User32.dll Module 77 E3 7E EC noping = String20, unescape"%90" lnj3ctc0d3 = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" &...
[SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops
VULNERABILITY IN FACE RECOGNITION AUTHENTICATION MECHANISM LENOVO-ASUS-TOSHIBA LAPTOPS 1. General Information Face Recognition feature is provided by Asus, Lenovo and Toshiba as specialized software that is issued together with their laptops. This feature is embedded into all laptop families havi...
kernel PWC driver DoS
The disconnect method in the Philips USB Webcam pwc driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service USB subsystem hang and CPU consumption in khubd by not closing the device after the...
Network Camera Web Server Detection
The remote web server controls a network camera. C Tenable, Inc. References: http://johnny.ihackstuff.com/ghdb.php?function=summary&cat=18 http://www.net-security.org/vuln.php?id=3288 include"compat.inc"; if description scriptid33523; scriptversion"1.40";...
kernel PWC driver DoS
The disconnect method in the Philips USB Webcam pwc driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service USB subsystem hang and CPU consumption in khubd by not closing the device after the...
Debian DSA-1503-1 : kernel-source-2.4.27 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-2731 infamous41md reported multiple integer...
Server side request forgery (ssrf)
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied request."...
CVE-2007-6693
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied request."...
CVE-2007-6693
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied request."...
CVE-2007-6693
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied request."...
CVE-2007-6693
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied request."...
CVE-2007-6693
CVE-2007-6693 affects Menalto Gallery’s WebCam module prior to version 2.2.4, tied to a proxied request vulnerability. Connected sources (GLSA 200802-04) describe multiple Gallery vulnerabilities (CVE-2007-6685..6693) with remote code execution, XSS, and CSRF potential; advisory recommends upgrad...
Linux kernel multiple security vulnrabilities
unask is not correctly applied on CIFS filesystem, DoS via hugetlbvmtruncatelist and hugetlbvmtruncate, IA32 emulation subsystem processor registors access, ieee80211rx integer overflow, Philips USB Webcam driver DoS, waittaskstopped DoS...
[ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:008 http://www.mandriva.com/security/ Package : kernel Date : January 11, 2008 Affected: Corporate 4.0 Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The CIF...