9301 matches found
edisgo (0.2.0), opencv-browser-camera (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-49766 via werkzeug (2.2.0)
werkzeug PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - edisgo 0.2.0 - opencv-browser-camera =0.1.0, =0.1.2 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...
CVE-2024-48644
Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...
CVE-2024-48644: Observable Discrepancy
Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...
CVE-2024-48644
Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...
Reolink Duo 2 WiFi Camera security vulnerabilities
Reolink Duo 2 WiFi Camera is a camera from Reolink USA. A security vulnerability exists in Reolink Duo 2 WiFi Camera version v3.0.0.188923031701, which stems from the presence of an account enumeration vulnerability that could allow a remote attacker to determine a valid user account via a login...
CVE-2024-48644
Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...
“HM Surf” macOS Flaw Lets Attackers Access Camera and Mic – Patch Now!
Researchers at Microsoft discovered a new macOS vulnerability, "HM Surf" CVE-2024-44133, which bypasses TCC protections, allowing unauthorized access…...
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...
CVE-2024-48791
An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...
Robot vacuum cleaners hacked to spy on, insult owners
Multiple robot vacuum cleaners in the US were hacked to yell obscenities and insults through the onboard speakers. ABC news was able to confirm reports of this hack in robot vacuum cleaners of the type Ecovacs Deebot X2, which are manufactured in China. Ecovacs is considered the leading service...
CVE-2024-48791
An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48791: Missing Authentication for Critical Function
An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48791
An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...
Plug n Play Camera com.starvedia.mCamView.zwave security vulnerability
Plug n Play Camera com.starvedia.mCamView.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update...
CVE-2024-48791
A security vulnerability exists in the Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1 driver. A remote attacker can exploit this issue to obtain sensitive information by targeting the firmware update process . The root cause is identified as missing authentication for a critical fu...
CVE-2024-48770
An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48775
An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...
Plug n Play Camera com.ezset.delaney security vulnerabilities
Plug n Play Camera com.ezset.delaney is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.ezset.delaney version 1.2.0, which originated from an issue that allows remote attackers to obtain sensitive information through the firmware update process...
PT-2024-33211 · Unknown · Plug N Play Camera
Name of the Vulnerable Software and Affected Versions: Plug n Play Camera com.ezset.delaney version 1.2.0 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.2.0, update the firmware to a version that...