PT-2026-47079

An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting functions. An attacker may inject crafted format strings into event subscription requests or notification generation pa...

Exploit for Race Condition in Canonical Ubuntu_Linux

IoT Firmware Reverse Engineering — IoT Camera Security Uni...

RTSP Unauthenticated Stream Exposure Checker

This Python script uses the OpenCV library cv2 to test whether an IP camera exposes its RTSP stream without authentication. It attempts to connect to the default RTSP endpoint rtsp://:554/default and checks if the stream can be opened and a video frame retrieved successfully. If the connection...

Huawei HarmonyOS Camera Module Type Obfuscation Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A type confusion vulnerability exists in the Huawei HarmonyOS camera module, which can be exploited by an attacker to cause usability to be compromised...

CVE-2021-22943

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect cameras assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later...

CVE-2022-33712

Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S12 allows attacker to get sensitive information...

PT-2025-48192

Name of the Vulnerable Software and Affected Versions ESCAM QD-900 WIFI HD cameras affected versions not specified Description The ESCAM QD-900 WIFI HD cameras have an issue where the /web/cgi-bin/hi3510/backup.cgi endpoint allows the download of a compressed configuration backup without...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

EUVD-2017-8267

Malware in sbrugna...

EUVD-2018-1472

Malware in sbrugna...

EUVD-2012-3990

Malware in sbrugna...

EUVD-2007-4907

Malware in sbrugna...

EUVD-2020-27916

Malware in sbrugna...

EUVD-2020-18435

Malware in sbrugna...

EUVD-2020-3968

Malware in sbrugna...

EUVD-2021-12726

Malware in sbrugna...

EUVD-2013-3249

Malware in sbrugna...

EUVD-2018-5063

Malware in sbrugna...

EUVD-2023-34775

Malicious code in bioql PyPI...

EUVD-2023-34574

Malicious code in bioql PyPI...