PT-2024-8353 · Unknown · Mipc Camera

Name of the Vulnerable Software and Affected Versions: MIPC Camera firmware versions prior to 5.4.1.240424171021 Description: The issue is related to an OS command injection vulnerability in the ccm debug component. This vulnerability can be exploited by sending a crafted HTTP request, allowing a...

PT-2025-2514 · Qualcomm · Qualcomm Embedded Platform Microcode

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform microcode affected versions not specified Description: The issue is related to a memory corruption problem that occurs when parsing memory map information in IOCTL calls. This can be exploited to impact the...

eSmartCam Man-in-the-Middle

The vulnerability of the eSmartCam surveillance application for wireless cameras of the ElinkSmart SKY30W series lies in the use of a rigidly encrypted cryptographic key called AES. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. A parameter injection vulnerability exists in the Commend WS203VICM that originates from weakly encoding credentials used to transmit the WS203VICM...

CVE-2024-26548

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uploadfile.cgi component...

CVE-2024-26548

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uploadfile.cgi component...

Design/Logic Flaw

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uploadfile.cgi component...

CVE-2024-26548: Undefined Security Weakness

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uploadfile.cgi component...

CVE-2024-26548

A remote attacker can execute arbitrary code on a vivotek Network Camera running version v.FD8166A-VVTK-0204j by sending a crafted payload to the upload_file.cgi component. This vulnerability allows for full system compromise as the attacker can run unauthorized commands remotely. While no offici...

CVE-2024-26548

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uploadfile.cgi component...

PT-2024-21419 · Vivotek · Vivotek Network Cameras

Name of the Vulnerable Software and Affected Versions: vivotek Network Camera version v.FD8166A-VVTK-0204j Description: An issue in the vivotek Network Camera allows a remote attacker to execute arbitrary code via a crafted payload to the "upload file.cgi" component. Recommendations: For version...

BackDoorSim - An Educational Into Remote Administration Tools

BackdoorSim is a remote administration and monitoring tool designed for educational and testing purposes. It consists of two main components: ControlServer and BackdoorClient. The server controls the client, allowing for various operations like file transfer, system monitoring, and more. Disclaim...

A week in security (February 19 – February 25)

Last week on Malwarebytes Labs: Joomla! patches XSS flaws that could lead to remote code execution Update now! ConnectWise ScreenConnect vulnerability needs your attention Why ransomware gangs love using RMM tools—and how to stop them Signal to shield user phone numbers by default Vibrator virus...

CVE-2023-52154

File Upload vulnerability in pmb/cameraupload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files...

CVE-2023-52154

File Upload vulnerability in pmb/cameraupload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files...

PT-2024-14442

Name of the Vulnerable Software and Affected Versions PMB versions 7.4.7 and earlier Description The issue allows attackers to run arbitrary code via the upload of crafted PHTML files, exploiting a File Upload vulnerability in the pmb/camera upload.php file. Recommendations For PMB versions 7.4.7...

CVE-2023-52154

The PMB document management system (versions 7.4.7 and earlier ) is vulnerable to a file upload flaw in the pmb/camera_upload.php component. An unauthenticated, remote attacker can exploit this by uploading a crafted PHTML file to execute arbitrary code on the target system. The provided document...

PMB security breach

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB 7.4.7 and prior versions that originated from allowing an unauthenticated, remote attacker to run arbitrary code via pmb/cameraupload.php using a crafted PHTML file...

CVE-2024-0017

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2024-15294 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a possible confused deputy due to a permissions bypass in the shouldUseNoOpLocation function of CameraActivity.java. This could lead to local information disclosure...