PT-2015-3694

Name of the Vulnerable Software and Affected Versions Y-Cam camera models SD range versions 4.30 and earlier Y-Cam camera models S range versions 4.30 and earlier Y-Cam EyeBall version 4.30 and earlier Y-Cam Bullet VGA versions 4.30 and earlier Y-Cam Bullet HD 720 version 4.30 and earlier Y-cam...

CVE-2014-1901: Improper Input Validation

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1902: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

CVE-2014-1900: Exposure of Sensitive Information to an Unauthorized Actor

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

Oracle.com Cross Site Scripting

Exploit Title: Oracle.com sub-domain Reflected Cross-Site Scripting RXSS Date: 04/04/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.oracle.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: Oracle.com dne sub-domain Oracle description :...

Cisco PVC IP Cam Information Disclosure

Cisco PVC IP Cam is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3051

The Internet Service Monitor ISM agent in IBM Tivoli Composite Application Manager ITCAM for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6004

The CVE-2014-6004 entry concerns the Pocket Cam Photo Editor (mobi.pocketcam.editor) app, version 3 for Android. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6989

Name of the Vulnerable Software and Affected Versions The Pocket Cam Photo Editor aka mobi.pocketcam.editor version 3 for Android Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and...

CVE-2014-6004: Undefined Security Weakness

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Video Cam Server 1.0 Administrative Interface Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13459/info Video Cam Server is prone to an authentication bypass vulnerability. This vulnerability exists because Video Cam Server fails to control access to the administrative interface. http://www.example.com/admin.html...

Camtron CMNC-200 IP Camera Denial of Service Vulnerability

No description provided by source. Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests with long...

Video Cam Server 1.0 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13457/info Video Cam Server is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...

CA CAM log_security() Stack Buffer Overflow (Win32)

No description provided by source. $Id: camlogsecurity.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

video cam server 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13456/info Video Cam Server is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example.com/......................\windows\system.ini GET...

CATIA V5 CATSysDemon.exe缓冲区溢出漏洞

CATIA是数字产品定义及生命周期管理使用的CAD、CAE、CAM应用集成软件包。 CATIA V5 6R2013及其他版本处理某些数据包时，CATSysDemon.exe内出错，恶意用户通过发送特制的数据包到TCP端口55555，利用此漏洞可造成栈缓冲区溢出。 0 3ds catia-v5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.3ds.com/...

Catia V5-6R2013 - 'CATV5_Backbone_Bus' Stack Buffer Overflow (PoC)

''' Title: Dassault Syst�mes Catia V5-6R2013 "CATV5BackboneBus" Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.3ds.com/products-services/catia/portfolio/catia-v5/latest-release/ Tested on: Windows 7 & Windows XP...