9366 matches found
CVE-2023-24505: Exposure of Sensitive Information to an Unauthorized Actor
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request...
CVE-2023-24506: Insufficiently Protected Credentials
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...
CVE-2023-23543: Undefined Security Weakness
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...
PT-2023-19652 · Milesight · Milesight Ncr/Camera
Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows sensitive information disclosure through an unspecified request. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information abou...
PT-2023-19653 · Milesight · Milesight Ncr/Camera
Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue exposes credentials through an unspecified request. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer version th...
Milesight NCR/camera security vulnerabilities
Milesight is a complete Artificial Intelligence video surveillance solution from the Chinese company Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5. An attacker could exploit the vulnerability to disclose sensitive information via an unspecified request...
Milesight NCR/camera security vulnerabilities
Milesight is a complete Artificial Intelligence video surveillance solution from the Chinese company Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5. An attacker exploited the vulnerability to disclose credentials via an unspecified request...
Fleckpe Android Malware Sneaks onto Google Play Store with Over 620,000 Downloads
A new Android subscription malware named Fleckpe has been unearthed on the Google Play Store, amassing more than 620,000 downloads in total since 2022. Kaspersky, which identified 11 apps on the official app storefront, said the malware masqueraded as legitimate photo editing apps, camera, and...
PT-2023-11231 · Undefined · Undefined
Хакеры эксплуатируют уязвимость пятилетней давности, взламывая видеокамеры в банках Исследователи Fortinet FortiGuard Labs предупреждают, что злоумышленники активно эксплуатируют критическую неисправленную уязвимость, влияющую на устройства цифровой видеозаписи DVR TBK. Недостаток, отслеживаемый...
Native Windows Camera application is not working in Citrix session.
Native Windows Camera application is not working in Citrix session. Issue is not seen in a RDP session...
CVE-2023-27747
BlackVue DR750-2CH LTE v.1.0122022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings...
BlackVue DR750-2CH LTE security vulnerabilities
BlackVue DR750-2CH LTE is an in-vehicle full HD monitor from BlackVue. A security vulnerability exists in BlackVue DR750-2CH LTE v.1.0122022.10.26. An attacker exploited the vulnerability to easily crack the default password via brute force attack...
ABUS Security Camera TVIP 20000-21150 - LFI_ RCE and SSH Root Access
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Exploit Title: ABUS Security Camera TVIP 20000-21150 - LFI, RCE and SSH Root Access Date: 2023-02-16 Exploit Author: [email protected] for NetworkSEC NWSSA-001-2023 Vendor Homepage: https://www.abus.com Version/Model: TVIP...
GeoVision Camera GV-ADR2701 - Authentication Bypass Vulnerability
Exploit Title: GeoVision Camera GV-ADR2701 - Authentication Bypass Device name: GV-ADR2701 Exploit Author: Chan Nyein Wai Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Firmware Version: V1.0020171215 Tested on: windows 10 Exploitation...
GeoVision Camera GV-ADR2701 - Authentication Bypass
Exploit Title: GeoVision Camera GV-ADR2701 - Authentication Bypass Device name: GV-ADR2701 Date: 26 December , 2020 Exploit Author: Chan Nyein Wai Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Firmware Version: V1.0020171215 Tested on...
Threat Source newsletter (March 30, 2023) — It’s impossible to tell if your home security camera or doorbell is truly safe
Welcome to this weeks edition of the Threat Source newsletter. Everyone loves a good video of someone slipping on their icy steps in the winter, captured thanks to their home security camera or smart doorbell. But what about when that camera is just kind of chilling out and not catching the momen...
Tapo C310 RTSP server v1.3.0 - Unauthorised Video Stream Access Vulnerability
Exploit Title: Tapo C310 RTSP server v1.3.0- Unauthorised Video Stream Access Date: 19th July 2022 Exploit Author: dsclee1 Vendor Homepage: tp-link.com Software Link: http://download.tplinkcloud.com/firmware/TapoC310v1en1.3.0Build220328Rel.64283nu1649923652150.bin Version: 1.3.0 Tested on: Linux ...
Raspberry Pi Camera Server 1.0 Authentication Bypass
Exploit Title: "camp" Raspberry Pi camera server 1.0 - Authentication Bypass Date: 2022-07-25 Exploit Author: Elias Hohl Vendor Homepage: https://github.com/patrickfuller Software Link: https://github.com/patrickfuller/camp Version: bf6af5c2e5cf713e4050c11c52dd4c55e89880b1 Tested on: Ubuntu 20.04...
Raspberry Pi Camera Server 1.0 Authentication Bypass Vulnerability
Exploit Title: "camp" Raspberry Pi camera server 1.0 - Authentication Bypass Exploit Author: Elias Hohl Vendor Homepage: https://github.com/patrickfuller Software Link: https://github.com/patrickfuller/camp Version: bf6af5c2e5cf713e4050c11c52dd4c55e89880b1 Tested on: Ubuntu 20.04 CVE :...
About the security content of iOS 15.7.4 and iPadOS 15.7.4
About the security content of iOS 15.7.4 and iPadOS 15.7.4 This document describes the security content of iOS 15.7.4 and iPadOS 15.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...