Lucene search
+L

723 matches found

OSV
OSV
•added 2024/08/19 9:59 a.m.•16 views

MAL-2024-12208 Malicious code in assistant-threader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6dba125172b57e6b24bcd2cc0df076483e1fe36d1969f37e533d611fb6f9d808 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

7.1AI score
SaveExploits0References1
OSV
OSV
•added 2024/08/19 9:59 a.m.•19 views

MAL-2024-12363 Malicious code in threading-assistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7b431362a8fc3af245e62278011eb007f0b23eeaa959c3a34bbb959fa549a4c Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

7.1AI score
SaveExploits0References1
CNVD
CNVD
•added 2024/07/19 12:00 a.m.•54 views

TP-LINK Tapo C210 Stack Buffer Overflow Vulnerability

TP-LINK Tapo C210 is a webcam device from China P&L TP-LINK. The TP-LINK Tapo C210 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on an affected device...

8CVSS8.1AI score0.00754EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•14 views

Longse LBH30FE200W Security Breach

The Longse LBH30FE200W is a wireless webcam from China-based Longse Technology Longse. A security vulnerability exists in the Longse LBH30FE200W that stems from the use of a telnet password that follows a specific pattern. Once the pattern is known, it is relatively easy to brute-force break the...

8.6CVSS6.9AI score0.00208EPSS
SaveExploits0References4
OSV
OSV
•added 2024/06/17 11:15 p.m.•16 views

CVE-2024-6080

A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to th...

7.8CVSS5.2AI score0.00206EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/06/17 12:00 a.m.•25 views

PT-2024-37371 · Intelbras · Intelbras Incontrol

Name of the Vulnerable Software and Affected Versions: Intelbras InControl version 2.21.56 Description: A critical vulnerability was found in Intelbras InControl, affecting unknown code of the component incontrolWebcam Service. The manipulation leads to an unquoted search path, requiring local...

8.5CVSS7.2AI score0.00206EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•20 views

TP-LINK Tapo C210 安全漏洞

TP-LINK Tapo C210 is a webcam device from China P&L TP-LINK. The TP-LINK Tapo C210 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on an affected device...

8CVSS8.1AI score0.00754EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•16 views

D-Link DCS-8300LHV2 安全漏洞

The D-Link DCS-8300LHV2 is a webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-8300LHV2 that stems from an ONVIF hard-coded PIN authentication bypass vulnerability...

8.8CVSS6.8AI score0.03871EPSS
SaveExploits0References3
NVD
NVD
•added 2024/04/23 7:15 a.m.•21 views

CVE-2024-4031

Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code...

4.4CVSS4.9AI score0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/23 6:29 a.m.•15 views

CVE-2024-4031 MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability

Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code...

4.4CVSS7.1AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/23 6:29 a.m.•34 views

CVE-2024-4031 MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability

Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code...

4.4CVSS5.2AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/23 12:00 a.m.•19 views

Logitech MEVO WEBCAM APP 安全漏洞

Logitech MEVO WEBCAM APP is a webcam application from Logitech Switzerland. A security vulnerability exists in Logitech MEVO WEBCAM APP, which stems from a vulnerability in the presence of an un-referenced search path or element, which allows local execution of arbitrary code...

4.4CVSS6.8AI score0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•17 views

PT-2024-28803 · Logitech · Logitech Mevo Webcam App

Name of the Vulnerable Software and Affected Versions: Logitech MEVO WEBCAM APP affected versions not specified Description: The issue concerns an Unquoted Search Path or Element vulnerability in the Logitech MEVO WEBCAM APP on Windows, allowing for Local Execution of Code. Recommendations: At th...

4.4CVSS7.1AI score0.00229EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•5 views

CVE-2024-4031: Unquoted Search Path or Element

Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code...

4.4CVSS5.8AI score0.00229EPSS
SaveExploits0References2
Mend
Mend
•added 2024/03/18 9:17 p.m.•4 views

CVE-2024-28237

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

4.8CVSS0.00439EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/03/18 9:17 p.m.•70 views

CVE-2024-28237 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

4CVSS4.7AI score0.00439EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/18 9:17 p.m.•35 views

CVE-2024-28237 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

4CVSS4.4AI score0.00439EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/18 8:29 p.m.•39 views

GHSA-X7MF-WRH9-R76C XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

Impact OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute...

4CVSS4.7AI score0.00439EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2024/03/18 8:29 p.m.•53 views

XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

Impact OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute...

4.8CVSS6.7AI score0.00439EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•4 views

CVE-2024-28237: Improper Neutralization of Input During Web Page Generation

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

4.8CVSS5.9AI score0.00439EPSS
SaveExploits1References3
Rows per page
Query Builder