7805 matches found
CVE-2022-38690
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel...
UNISOC chipset 缓冲区错误漏洞
The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset that originates from improper locking in the camera driver, which may result in memory corruption, and can be exploited by an attacker to cause a loc...
UNISOC chipset 缓冲区错误漏洞
The UNISOC chipset is an integrated circuit chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of boundary checking in the camera driver, which may result in out-of-bounds writes, which could lead to a local denial of service in...
CVE-2022-38690
CVE-2022-38690: In the kernel camera driver, a memory corruption can occur due to improper locking, leading to local denial of service. This is described across multiple sources (NVD/OSV-like entries and PRION) and is specifically tied to the camera driver component; no exploitation details or pa...
CVE-2022-38671
The CVE-2022-38671 entry concerns a vulnerability in the UNISOC camera driver where a missing bounds check enables an out-of-bounds write, potentially causing a local denial of service in the kernel. The NVD description confirms the issue as an out-of-bounds write in the camera driver with local ...
CVE-2022-39861
Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege...
CVE-2022-39861
Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege...
CVE-2022-39857
Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers to access broadcasting Intent as system uid privilege...
CVE-2022-39858
Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera privilege...
Privilege escalation
Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 3.5.51, which originates from an unprotected receiver in AtBroadcastReceiver in FactoryCamera...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 3.5.51, which originates from an improper access control vulnerability in...
CVE-2022-39861
Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege...
PT-2022-25048 · Unknown · Factorycamera
Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to 3.5.51 Description: A path traversal issue exists in the AtBroadcastReceiver component of FactoryCamera, allowing attackers to write arbitrary files with FactoryCamera privileges. Recommendations: For versions...
SAMSUNG Mobile devices 路径遍历漏洞
SAMSUNG Mobile devices are a series of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A path traversal vulnerability exists in SAMSUNG Mobile devices version 3.5.51, which stems from a path traversal vulnerability in AtBroadcastReceiver in...
Metasploit Weekly Wrap-Up
Veritas Backup Exec Agent RCE This module kindly provided by c0rs targets the Veritas Backup Exec Agent in order to gain RCE as the system/root user. The exploit itself is actually a chain of 3 separate CVEs CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878 which only makes it more impressive...
CVE-2022-32540
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras wi...
PT-2022-21357 · Bosch · Videojet Decoder Vjd-7513 +1
Name of the Vulnerable Software and Affected Versions: BVMS versions 10.1.1 through 11.1.0 VIDEOJET Decoder VJD-7513 versions 10.23 through 10.30 Description: The issue allows a man-in-the-middle attacker to compromise confidential video streams. This is applicable when the target system contains...
mIPC camera firmware buffer overflow vulnerability
mIPC camera firmware is a camera from mIPC. mIPC camera firmware version 5.3.1.2003161406 is vulnerable to an input validation error, which stems from unrestricted user input when setting up a zone file and can be exploited by an attacker to trigger a stack buffer overflow...