820 matches found
PT-2014-3028
Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to multiple array index errors in the MSM camera driver, specifically in the msm cam server.c file. These errors can be exploited by attackers to gain privileges, leveraging access to...
TRENDNet IP Cam Authentication Bypass Vulnerability
Exploit for hardware platform in category remote exploits Exploit Title: TRENDNet IP Cam Magic URL Searcher. Date: 10/04/2013 Author: SnakingMax Website: http://snakingmax.blogspot.com/ Category: Remote Exploit Vulnerability description: Bypass the TRENDNet IP Cam authentication protection by...
How Facebook and Facial Recognition Are Creating a Minority Report-Style Privacy Meltdown
Researchers at the annual Black Hat Briefings in Las Vegas have demonstrated how cloud computing, facial recognition technology, Facebook, a freely available personal information can be used to match faces in a crowd to detailed online profiles. The demonstration brings us closer to the brink of ...
CA CAM (Windows x86) - 'log_security()' Remote Stack Buffer Overflow (Metasploit)
$Id: camlogsecurity.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
CA CAM log_security() Stack Overflow (Win32)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA CAM...
mxCamArchive 2.2 Bypass Config Download Vulnerability
No description provided by source. Bypass Config Download Vulnerability script: mxcamarchive 2.2 download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip ........................................................................... expl: http://site.com/path/archive/config.ini and...
mxCamArchive 2.2 - Bypass Configuration Download
Bypass Config Download Vulnerability script: mxcamarchive 2.2 download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip ........................................................................... expl: http://site.com/path/archive/config.ini and login http://site.com/path/admin an...
CVE-2008-1155
Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...
CVE-2007-5454: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a .. dot dot in the cam parameter...
Heap overflow
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...
CVE-2007-2931
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...
[Full-disclosure] [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35527: CA Message Queuing CAM / CAFT Buffer Overflow Vulnerability CA Vuln ID CAID: 35527 CA Advisory Date: 2007-07-24 Reported By: Paul Mehta of ISS X-Force Impact: A remote attacker can execute arbitrary code. Summary: Multiple CA produc...
CVE-2007-0058
CVE-2007-0058 affects Cisco Clean Access (CCA) on the Clean Access Manager (CAM): versions 3.5.x up to 3.5.9 and 3.6.x up to 3.6.1.1 allow remote attackers to bypass authentication and download arbitrary manual database backups by brute-forcing the snapshot filename and requesting the file direct...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access Advisory ID: cisco-sa-20070103-CleanAccess http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Revision 1.0 For Public Release 2007 January 03 1600 UTC GMT -...
Cisco Clean Access多个远程安全漏洞
Cisco Clean Access CCA是一种用于自动检测、隔离、清除受恶意代码感染的设备访问网络的软件解决方案。 CCA的实现上存在两个安全漏洞，远程攻击得可能利用这些漏洞获取非授权访问或得到敏感信息。 CCA与Cisco Clean Access Manager CAM交互时，交互双方需要相同的密钥，CAM端的密钥在CAM和CAS初始化时设定，CCA实现上的漏洞使此密钥不可被更改，网络上所有相关的设备共享了相同的密钥，可能导致非授权访问。此漏洞的Cisco Bug ID为CSCsd48626，影响如下的CCA版本： CCA releases 3.6.x - 3.6.4.2 CCA...
TZipBuilder / Abakt / CAM UnZip / ZipCentral buffer overflow
Buffer overflow on ZIP archives parsing...
[Full-disclosure] Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability
====================================================================== Secunia Research 19/05/2006 - CAM UnZip ZIP File Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
Buffer overflow
Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...
CVE-2006-2161
Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...
CVE-2006-2161
Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...