Lucene search
+L

9268 matches found

osv_cve
osv_cve
•added 2025/09/03 6:15 a.m.•15 views

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

4.6CVSS5.8AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/03 6:15 a.m.•26 views

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

6.1CVSS0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/03 5:17 a.m.•26 views

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

6.1CVSS0.00164EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/03 5:17 a.m.•92 views

CVE-2023-21482

The Samsung Camera app contains a Missing authorization vulnerability that affects specific versions prior to 11.1.02.18 (Android 11), 12.1.03.8 (Android 12), and 13.1.01.4 (Android 13). The issue allows a physical attacker to install a package through Galaxy Store before the Setup wizard complet...

6.1CVSS6AI score0.00164EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/03 5:17 a.m.•20 views

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

6.1CVSS6AI score0.00164EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/09/03 12:00 a.m.•15 views

TP-Link TL-IPC544EP-W4 DoS

The vulnerability of the sub69064 function in TP-Link’s IP camera surveillance microprogramming software TP-Link TL-IPC544EP-W4 lies in the fact that the operation results are written outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service...

9CVSS7.5AI score0.01027EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/09/03 12:00 a.m.•23 views

PT-2025-35674

Name of the Vulnerable Software and Affected Versions Camera versions prior to 11.1.02.18 Camera versions prior to 12.1.03.8 Camera versions prior to 13.1.01.4 Description A missing authorization issue exists in the Camera application. This allows a physical attacker to install a package through...

6.1CVSS6.1AI score0.00164EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•8 views

CVE-2023-21482: Undefined Security Weakness

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

6.1CVSS5.8AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•20 views

Samsung Camera security vulnerabilities

SAMSUNG Camera is a Samsung camera application from Samsung South Korea. A security vulnerability exists in SAMSUNG Camera that stems from a lack of authorization and could allow a physical attacker to install packages through the Galaxy Store before the setup wizard completes...

6.1CVSS6.4AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/02 8:15 p.m.•18 views

CVE-2025-8613

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS0.0122EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/02 7:49 p.m.•9 views

CVE-2025-8613 Vacron Camera ping Command Injection Remote Code Execution Vulnerability

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS7.7AI score0.0122EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/02 7:49 p.m.•38 views

CVE-2025-8613

The CVE-2025-8613 issue affects Vacron Camera devices, specifically a command injection in the webs.cgi endpoint. The flaw arises from insufficient validation of a user-supplied string before it is used to perform a system call, allowing an unauthenticated attacker to execute code with root privi...

7.2CVSS7.7AI score0.0122EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/02 7:49 p.m.•31 views

CVE-2025-8613 Vacron Camera ping Command Injection Remote Code Execution Vulnerability

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS0.0122EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
•added 2025/09/02 1:30 p.m.•22 views

Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise

Each year at DEF CON’s IoT Village, Rapid7 researchers showcase their skills in penetration testing, hardware hacking, and more. At DEF CON 33, Principal Security Researcher, IoT, Deral Heiland took attendees step by step through a brand-new, hands-on exercise that pushed past last year’s lessons...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•17 views

Vacron Camera operating system command injection vulnerability

Vacron Camera is a camera from Vacron Corporation of Taiwan, China. Vacron Camera suffers from an operating system command injection vulnerability that stems from insufficient webs.cgi endpoint validation, which could lead to remote code execution...

7.2CVSS7.7AI score0.0122EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•7 views

CVE-2025-8613: Improper Neutralization of Special Elements used in an OS Command

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS6.7AI score0.0122EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/09/01 10:58 a.m.•195 views

Exploit for CVE-2021-45678

It is an offensive tool for Hikvision IP Camera. The tool is a P...

9.8CVSS8.5AI score0.01328EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2013-4739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows...

4.9CVSS5.3AI score0.00272EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-38585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected...

7.8CVSS7AI score0.00219EPSS
SaveExploits0References3
osv_mal
osv_mal
•added 2025/08/29 7:22 p.m.•11 views

MAL-2025-41952 Malicious code in cameraroll (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
Rows per page
Query Builder