PT-2025-8940 · Trivision · Trivision Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: Trivision Camera NC227WF version 5.8.0 Description: An Authentication Bypass issue allows an attacker to retrieve administrator's credentials in cleartext. This is achieved by sending a request to the "/en/player/activex pal.asp" API endpoint...

The vulnerability of the control interface of the UniFi Protect Camera system allows a intruder to execute arbitrary code and gain full control over the system.

The vulnerability of the UniFi Protect Camera system’s control interface relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and gain full control over the system...

The vulnerability of UniFi Protect Camera systems, related to errors in the authentication process, allows a violator to gain full control over the system.

The vulnerability of UniFi Protect Camera systems lies in errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the system...

YI Smart Dash Camera 安全漏洞

YI Smart Dash Camera is a smart car recorder from YI. A security vulnerability exists in YI Smart Dash Camera version v3.88, which originates from improper access control of the HTTP server, allowing unrestricted file downloads, uploads, and API commands to be executed, which may result in...

CVE-2025-1338

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338 NUUO Camera handle_config.php print_file command injection

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338 NUUO Camera handle_config.php print_file command injection

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-1338

CVE-2025-1338 affects NUUO Camera versions up to 20250203. The vulnerability resides in the handle_config.php function print_file, where manipulation of the log argument enables remote OS command injection. The issue is remotely exploitable and has public exploits/public disclosure. Impact is rem...

PT-2025-6881

Name of the Vulnerable Software and Affected Versions NUUO Camera versions prior to 20250203 Description A critical issue exists in NUUO Camera that allows for remote command injection. The issue affects the print file function within the /handle config.php file. Manipulation of the log argument...

NUUO Camera 注入漏洞

NUUO Camera is a series of webcams from NUUO. An injection vulnerability exists in NUUO Camera 20250203 and earlier versions, which originates in the printfile function of /handleconfig.php with a command injection in the parameter log...

CVE-2024-35344

Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800NN2, YMF50B, YM800SV2, YM500L8, and YM200E10...

CVE-2024-35342

Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280,...

CVE-2025-25526

Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

CVE-2025-25526

Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

February 11, 2025—KB5052032 (Security-only update)

None None...

PT-2025-6381 · Mercury · Mercury Mipc552W Camera

Name of the Vulnerable Software and Affected Versions: Mercury MIPC552W Camera version 1.0 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification, which is connected to the configuration of the PPTP server. Attackers who successfully exploit th...

CVE-2025-1099

This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform impersonation, data decryption and ma...

CVE-2025-1099 Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera

This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform impersonation, data decryption and ma...

CVE-2025-1099

CVE-2025-1099 affects the TP-Link/Tapo C500 Wi‑Fi camera. The vulnerability stems from a hard-coded RSA private key embedded in the device firmware, enabling a physically proximate attacker to obtain cryptographic private keys and perform impersonation, data decryption, and man-in-the-middle atta...