CVE-2024-45446

Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-45446

The CVE-2024-45446 entry concerns an access privilege verification vulnerability in the Huawei HarmonyOS camera driver module, with impact stated as availability loss. Multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE list, vulnrichment, PT Security) confirm the issue as an access-priority vulnera...

PT-2024-31461 · Za Internet · C-Mor

Name of the Vulnerable Software and Affected Versions: za-internet C-MOR Video Surveillance versions 5.2401 through 6.00PL01 Description: The issue is related to improper input validation in the C-MOR web interface, making it vulnerable to persistent cross-site scripting XSS attacks. This allows ...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an access privilege vulnerability in the Camera driver module...

Huawei HarmonyOS security vulnerabilities

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei EMUI and Huaw...

CVE-2024-45447: Exposure of Sensitive Information to an Unauthorized Actor

Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-45446: Improper Input Validation

Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

PT-2024-31635 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Camera driver module affected versions not specified Description: The issue is related to an access permission verification vulnerability in the camera driver module. Successful exploitation of this vulnerability will affect availability. The...

Camera-PI security vulnerabilities

camera-pi is a camera module by Michael Horne Personal Developer. A security vulnerability exists in camera-pi version 1.0, which stems from the mishandling of user input passed to the position GET parameter in the tilt.php script, which could allow an attacker to execute arbitrary commands by...

PT-2024-31636

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an access control vulnerability in the camera framework module. Successful exploitation of this vulnerability may affect service...

CVE-2024-44809: Improper Input Validation

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

CVE-2024-44809

A remote code execution (RCE) vulnerability exists in the Pi Camera project (version 1.0) , maintained by RECANTHA. The flaw is caused by improper sanitization of user input provided to the "position" GET parameter within the tilt.php script. An attacker can exploit this remotely by sending craft...

PT-2024-31260 · Pi Camera · Pi Camera

Name of the Vulnerable Software and Affected Versions: Pi Camera project version 1.0 Description: A remote code execution RCE vulnerability exists due to improper sanitization of user input passed to the position GET parameter in the tilt.php script. An attacker can exploit this by sending crafte...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

Rosewill RXS-3211 IP Camera Password Retriever

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Rosewill RXS-3211 IP Camera Password Retriever', 'Description' = %q This module takes advantage of a protocol design issue with the Rosewill admi...

Hikvision IP Camera Information Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Unauthenticated information disclosure such as configuration, credentials and camera snapshots of a vulnerable Hikvision IP Camera', 'Description...

JVC/Siemens/Vanderbilt IP-Camera Readfile Password Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'JVC/Siemens/Vanderbilt IP-Camera Readfile Password Disclosure', 'Description' = %q SIEMENS IP-Camera CVMS2025-IR + CCMS2025, JVC IP-Camera...

Cisco PVC2300 POE Video Camera Configuration Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco PVC2300 POE Video Camera configuration download', 'Description' = %q This module exploits an information disclosure vulnerability in Cisco...