CVE-2022-47352

The CVE-2022-47352 entry concerns the camera driver in Unisoc chipsets, where a missing bounds check allows an out-of-bounds read. This is described across Red Hat/NVD/CVE records as enabling possible local denial of service with SYSTEM-level execution required. Affected component is the camera d...

PT-2023-15267 · Unisoc (Shanghai) Technologies Co. +1 · T610/T618 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a camera driver, where a missing bounds check can lead to a possible out of bounds read. This could result in a local denial of...

PT-2023-15792 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a camera driver, where a missing bounds check can lead to a possible out of bounds write. This could result in a local denial of service and requires System...

UNISOC Chipsets Buffer Error Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets due to a lack of boundary checking in the camera driver, which may result in out-of-bounds reads...

Own Your Own Government Surveillance Van

A used government surveillance van is for sale in Chicago: So how was this van turned into a mobile spying center? Well, lets start with how it has more LCD monitors than a Counterstrike LAN party. They can be used to monitor any of six different video inputs including a videoscope camera. A...

CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

Deepfakes Are Being Used to Circumvent Facial Recognition Systems

By Habiba Rashid Camera Injection Attacks: The New Threat to Facial Recognition Security. This is a post from HackRead.com Read the original post: Deepfakes Are Being Used to Circumvent Facial Recognition Systems...

CVE-2023-38906

An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message...

camerastorelasvegas.com Cross Site Scripting vulnerability OBB-3597113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating

Security researchers accessed an internal camera inside the Deckmate 2 shuffler to learn the exact deck order—and the hand of every player at a poker table...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection.This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection.This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386 SQLi in a2 Camera Trap Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386

CVE-2023-3386 affects the a2 Camera Trap Tracking System prior to version 3.1905. The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, affecting the product’s ability to protect data and operate reliably. CVSS 3.1 base score 9.8 (Network attack, no ...

CVE-2023-3386 SQLi in a2 Camera Trap Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-28576 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver

The buffer obtained from kernel APIs such as cammemgetcpubuf may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header e.g. header.count, causing checks e.g. size checks in kernel code to be invalid. This may lead to...

CVE-2023-28576 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver

The buffer obtained from kernel APIs such as cammemgetcpubuf may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header e.g. header.count, causing checks e.g. size checks in kernel code to be invalid. This may lead to...

a2 Camera Trap Tracking System SQL Injection Vulnerability

a2 Camera Trap Tracking System is a camera trap tracking system from a2 Camera Trap Tracking System. A SQL injection vulnerability exists in a2 Camera Trap Tracking System versions prior to 3.1905 that stems from incorrect neutralization of special elements used in SQL commands...