SasCam WebCam Server 2.6.5 - ActiveX SEH Overwrite

No description provided by source. html object classid='clsid:0297D24A-F425-47EE-9F3B-A459BCE593E3' id='target'/object script language = 'vbscript' 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP...

webcamxp and webcam 7 - Directory Traversal vulnerability

No description provided by source. Exploit Title: WebcamXP and Webcam7 Directory Traversal Vulnerability Google Dork: powered by webcamxp xhtml css Google Dork: powered by webcam 7 Date: 2/22/2012 Author: Silent Dream Software Link: http://dl.filekicker.com/send/file/230775-FQAC/wlite550.exe...

PY Software Active Webcam 4.3 Webserver Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9260/info It has been reported that Active Webcam webserver may be prone to a directory traversal vulnerability that may allow a remote attacker to gain access to sensitive information, which may be used to launch further...

Webcam Corp Webcam Watchdog 1.0/1.1/3.63 Web Server Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9351/info A problem has been identified in the handling of remote web requests by the Webcam Watchdog software. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable system...

SasCam Webcam Server 2.6.5 Get() method - Buffer Overflow

No description provided by source. $Id: sascamget.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Dell Webcam Software Bundled ActiveX Remote Buffer Overflow Vulnerability

No description provided by source...

Webcam Corp Webcam Watchdog 4.0.1 sresult.exe Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10837/info Reportedly Webcam Corp Webcam Watchdog is affected by a remote cross-site scripting vulnerability in the sresult.exe binary. This issue is due to a failure of the application to properly sanitize user-supplied...

Dell Webcam CrazyTalk ActiveX BackImage Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

dcam webcam server personal web server 8.2.5 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9273/info It has been reported that the Personal Web Server of DCAM WebCam Server may be prone to a directory traversal vulnerability that may allow a remote attacker to traverse outside the server root directory by using...

WordPress Video Posts Webcam Recorder Plugin <= 1.55.4 - XSS

Because of this vulnerability in posts/videowhisper/rlogout.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

SA-CONTRIB-2014-061 - VideoWhisper Webcam Plugins - Cross Site Scripting (XSS) - Unsupported

Includes multiple modules for video communications including room listing, pay per view access control. The module doesn't sufficiently filter user supplied text from the url reflected cross site scripting. No special permissions are required to exploit this issue. There are no mitigating factors...

Video Comments Webcam Recorder <= 1.55 - Unauthenticated Reflected XSS

The Video Comments Webcam Recorder WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability...

Firefox Webcam Chat on Privileged JavaScript Shell

This module allows streaming a webcam from a privileged Firefox JavaScript shell. Module Options msf use post/firefox/manage/webcam/chat msf undefinedchat show actions ...actions... msf undefinedchat set ACTION msf undefinedchat show options ...show and set options... msf undefinedchat run This...

CVE-2014-2715

Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...

CVE-2014-2715

VideoWhisper Webcam Plugins (Drupal 7.x) are affected by CVE-2014-2715 due to cross-site scripting in vwrooms/templates/logout.tpl.php. The vulnerability allows injecting arbitrary script via the module or message parameters in index.php, caused by reflected user input. Impact is XSS; exploit det...

CVE-2014-2715

Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...

CVE-2014-2715: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...

PT-2014-4880

Name of the Vulnerable Software and Affected Versions VideoWhisper Webcam plugins for Drupal versions 7.x Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur...

Mozilla多个产品WebRTC会话权限提示伪造攻击漏洞

CVE ID:CVE-2014-1499 Mozilla Firefox/SeaMonkey是Mozilla所发布的WEB浏览器/新闻组客户端。 Mozilla多个产品处理WebRTC会话权限提示时存在错误会显示错误的域名，允许攻击者利用漏洞构建恶意WEB页，诱使用户解析，进行伪造攻击，可用于访问webcam或麦克风。 0 Mozilla Firefox 27 Mozilla Seamonkey 2.24 Mozilla Firefox 28，Seamonkey 2.25已经修复该漏洞，建议用户下载更新： http://www.mozilla.org...

Firefox < 28.0 Multiple Vulnerabilities

The installed version of Firefox is a version prior to 28.0 and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist that could lead to arbitrary code execution. CVE-2014-1493, CVE-2014-1494 - An issue exists where extracted files for updates are not...