Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

Authentication flaw

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1900

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

Authentication flaw

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1901

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1902

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

CVE-2014-1901

CVE-2014-1901 affects Y-Cam camera models and ranges (firmware 4.30 and earlier). The vulnerability allows remote authenticated users to cause a denial of service (reboot) by sending malformed parameters to en/store_main.asp, en/account/accedit.asp, or en/smtpclient.asp. Note: the issue can be ex...

CVE-2014-1902

CVE-2014-1902 covers multiple XSS vulnerabilities in Y-Cam cameras (SD range YCB003/YCK003/YCW003; S range YCB004/YCK004/YCW004; EyeBall YCEB03; Bullet VGA YCBL03/YCBLB3; Bullet HD 720 YCBLHD5; Classic YCB002/YCK002/YCW003; Original YCB001/YCW001), all affected by firmware 4.30 and earlier. The i...

CVE-2014-1900

CVE-2014-1900 affects multiple Y-Cam models (SD, S, EyeBall, Bullet, Classic, Original ranges) with firmware 4.30 and earlier. The issue allows remote attackers to bypass authentication and obtain sensitive information by sending a request to en/account/accedit.asp with a leading "./" sequence in...

CVE-2014-1900

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

Oracle.com Cross Site Scripting

Exploit Title: Oracle.com sub-domain Reflected Cross-Site Scripting RXSS Date: 04/04/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.oracle.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: Oracle.com dne sub-domain Oracle description :...

Cisco PVC IP Cam Information Disclosure

Cisco PVC IP Cam is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3051

The Internet Service Monitor ISM agent in IBM Tivoli Composite Application Manager ITCAM for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6004

The CVE-2014-6004 entry concerns the Pocket Cam Photo Editor (mobi.pocketcam.editor) app, version 3 for Android. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

video cam server 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13456/info Video Cam Server is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example.com/......................\windows\system.ini GET...

Video Cam Server 1.0 Administrative Interface Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13459/info Video Cam Server is prone to an authentication bypass vulnerability. This vulnerability exists because Video Cam Server fails to control access to the administrative interface. http://www.example.com/admin.html...

Camtron CMNC-200 IP Camera Denial of Service Vulnerability

No description provided by source. Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests with long...