The 25th anniversary of the webcam: What did it bring us?

How did the webcam progress from a simple convenience to a worldwide security concern in 25 years? November 2018 can be marked as the 25th anniversary of the webcam. This is a bit of an arbitrary choice, but if we consider a webcam that was installed at the University of Cambridge to keep an eye ...

Amcrest Security Bypass Vulnerability

Amcrest is a webcam product from the American company Amcrest. A security vulnerability exists in Amcrest that stems from the device using the same hard-coded SSL private key for different customer installations of the program. An attacker could exploit the vulnerability to bypass cryptographic...

Don’t Fall for Webcam Blackmail: Here’s How to Protect Yourself

By Waqas NordVPN Tips on How to Avoid Sextortion Scammers Who Claim to Have a Video of You on Adult Sites. Authorities and cybersecurity experts have issued a fresh warning about the so-called sextortion scam that is making a comeback with new variations. Webcam porn scams have been on the rise f...

Eavesdropping on Computer Screens through the Webcam Mic

Yet another way of eavesdropping on someone's computer activity: using the webcam microphone to "listen" to the computer's screen...

webcam.shelkino.su Open Redirect vulnerability

Open Bug Bounty ID: OBB-666290 Description| Value ---|--- Affected Website:| webcam.shelkino.su Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

us.unblock.webcam XSS vulnerability

Open Bug Bounty ID: OBB-656702 Description| Value ---|--- Affected Website:| us.unblock.webcam Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

EvilOSX - An Evil RAT (Remote Administration Tool) For macOS/OS X

An evil RAT Remote Administration Tool for macOS / OS X. Features Emulate a terminal instance Simple extendable module system No bot dependencies pure python Undetected by anti-virus OpenSSL AES-256 encrypted payloads Persistent GUI and CLI support Retrieve Chrome passwords Retrieve iCloud tokens...

Mobotix Webcam Default Credentials (HTTP)

The remote Mobotix Webcam is using known default credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Mobotix Webcam Detection

HTTP based detection of Mobotix Webcam devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Reasonably Clever Extortion E-mail Based on Password Theft

Imagine you've gotten your hands on a file of e-mail addresses and passwords. You want to monetize it, but the site it's for isn't very valuable. How do you use it? You convince the owners of the password to send you money. I recently saw a spam e-mail that ties the password to a porn site. The...

Sextortion Scam Uses Recipient’s Hacked Passwords

Here's a clever new twist on an old email scam that could serve to make the con far more believable. The message purports to have been sent from a hacker who's compromised your computer and used your webcam to record a video of you while you were watching porn. The missive threatens to release th...

halten.be XSS vulnerability

Open Bug Bounty ID: OBB-638559 Description| Value ---|--- Affected Website:| halten.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Pure python post-exploitation RAT for macOS & OSX: EvilOSX

A pure python, post-exploitation, RAT Remote Administration Tool for macOS / OSX. Features Emulate a simple terminal instance Undetected by anti-virus OpenSSL AES-256 encrypted payloads, HTTPS communication Multi-threaded No client dependencies pure python Persistent Simple extendable module syst...

CVE-2017-17101

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

CVE-2017-17101

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

CVE-2017-17101

The CVE-2017-17101 issue affects Apexis APM-H803-MPC software used on various IP cameras. A web application CGI entry point is unprotected, allowing an unauthenticated user to bypass login and access webcam contents, including live video streams, configuration files with passwords, and system inf...

PT-2018-6400

Name of the Vulnerable Software and Affected Versions: Apexis APM-H803-MPC software affected versions not specified Description: An issue in the software allows an unauthenticated user to bypass the login screen and access webcam contents, including live video streams, configuration files with...

EvilOSX

EvilOSX An evil RAT Remote Administration Tool for macOS...

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software, related to errors in managing registration data, allows a hacker to obtain user login credentials.

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user credentials using an HTTP request...

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to the lack of measures taken to neutralize special elements, allowing intruders to execute arbitrary commands.

The vulnerability of the Zivif PR115-204-P-RS webcam microprogramming software is related to the lack of measures taken to neutralize the special elements used in the command string. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using CGI scripts. An example...