PT-2024-24476 · Tuya · Tuya Smart Camera U6N

Name of the Vulnerable Software and Affected Versions: Tuya Smart camera U6N version 3.2.5 Description: An issue in the Tuya Smart camera U6N allows a remote attacker to cause a denial of service via a crafted packet to the network connection component. Recommendations: For Tuya Smart camera U6N...

CVE-2023-6116

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report...

CVE-2023-6116 Remote Code Execution without authentication using stack overflow

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report...

CVE-2023-6116

Hanwha Vision NVR/DVR remote code execution (CVE-2023-6116) arises from a flaw that allows arbitrary code execution by injecting code into HTTP request parameters. The vulnerability affects Hanwha Vision network video recorders (NVRs) and digital video recorders (DVRs) where the base address of s...

PT-2024-14884 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: A flaw has been discovered that allows for remote code execution on the camera. An attacker could inject malicious code into HTTP request packets to execute arbitrary code. The estimated...

EZVIZ CS-C6-21WFR-8 Trust Management Vulnerability

EZVIZ CS-C6-21WFR-8 is a security camera from China Fluorite EZVIZ. A trust management issue vulnerability exists in EZVIZ CS-C6-21WFR-8 version 5.2.7 Build 170628, which stems from the component Davinci application containing unknown parts that result in improper certificate validation...

Xiaomi Hualai Xiaofang iSC5 Trust Management Vulnerability

The Xiaomi Hualai Xiaofang iSC5 is a security camera from Xiaomi, a Chinese company. A trust management issue vulnerability exists in Xiaomi Hualai Xiaofang iSC5 version 3.2.2112, which stems from the camera containing some unknown functions that lead to improper certificate validation...

CVE-2024-31587

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request...

CVE-2024-31587

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request...

CVE-2024-31587

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request...

PT-2024-24146 · Unknown · Secustation Camera

Name of the Vulnerable Software and Affected Versions: SecuSTATION Camera versions V2.5.5.3116-S50-SMA-B20160811A and lower Description: The issue allows an unauthenticated attacker to download device configuration files by sending a crafted request. Recommendations: For SecuSTATION Camera versio...

SecuSTATION Camera security vulnerabilities

SecuSTATION Camera is a series of cameras from SecuSTATION USA. A security vulnerability exists in SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and prior versions, which stems from a vulnerability that allows an unauthenticated attacker to download the device configuration file via a crafted...

CVE-2024-31587: Improper Limitation of a Pathname to a Restricted Directory

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request...

CVE-2024-3764

Tuya SDK is affected up to version 5.0.x by a vulnerability in the MQTT Packet Handler that allows remote DoS, caused by issues in the handler component. The attack is described as requiring no user interaction, with network access as the attack vector and the impact stated as availability loss. ...

Tuya Camera security vulnerability

Tuya Camera is a series of webcams from Tuya. A security vulnerability exists in Tuya Camera version 3.2.9. An attacker has exploited the vulnerability to cause a denial of service on the system...

gemcameraclub.com.au Cross Site Scripting vulnerability OBB-3908266

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

CVE-2024-23658

A use after free vulnerability exists in the camera driver of UNISOC Chipsets due to a logic error that results in memory reuse after release. This flaw could lead to a local denial of service (DoS), though it requires System execution privileges . While the vulnerability affects Android versions...

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...