9366 matches found
ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Exploit Title: ABUS Security Camera LFI, RCE and SSH Root Access Date: 2023-02-16 Exploit Author: [email protected] for NetworkSEC NWSSA-001-2023 Vendor Homepage: https://www.abus.com Version/Model: TVIP 20000-21150 probabl...
ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution Vulnerability
ABUS Security Camera version TVIP 20000-21150 suffers from local file inclusion, hardcoded credential, and command injection vulnerabilities. When coupled together, they can be leveraged to achieve remote access as root via ssh...
CVE-2022-42838
CVE-2022-42838 affects macOS: camera data access logic could allow a camera extension to continue receiving video after the activating app closes. Impact is limited to local context (ACA/AVL vector) with low overall risk as described; remediation is Apple’s macOS Ventura 13 security update which ...
CVE-2022-42838: Operation on a Resource after Expiration or Release
An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...
Apple macOS security vulnerabilities
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS version 13 suffers from a security vulnerability that stems from the ability of the Camera Extension to continue receiving video after an active application is closed...
ABUS TVIP security vulnerabilities
ABUS TVIP is a series of video surveillance cameras from ABUS Germany. A security vulnerability exists in ABUS TVIP version 20000-21150 that originates from allowing remote attackers to execute arbitrary code...
CVE-2022-42838
An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...
CVE-2022-42838
An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...
VulnCheck KEV: CVE-2020-5741
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it...
CVE-2023-26032
ZoneMinder is affected by a SQL Injection in versions prior to 1.36.33 and 1.37.33 via a malicious JSON Web Token. The vulnerability arises because the Username field of the JWT token is trusted during SQL queries, enabling an attacker who can determine the JWT HASH key to forge a token and execu...
Cellinx NVT path traversal vulnerability
Cellinx NVT IP PTZ is a camera appliance from Cellinx Korea. A path traversal vulnerability exists in Cellinx NVT version v1.0.6.002b, which stems from the presence of a local file disclosure vulnerability...
CVE-2023-22984
A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...
CVE-2023-22984
A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...
Cross site scripting
UNSUPPORTED WHEN ASSIGNED A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...
CVE-2023-22984
A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...
CVE-2023-22984
Axis 207W network camera exposes a reflected XSS in the web administration portal that lets an attacker execute arbitrary JavaScript via a URL. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N with base score 6.1 (Medium). No public fix is documented in the provided sources; some refer...
PT-2023-18810 · Axis · Axis 207W
Name of the Vulnerable Software and Affected Versions: Axis 207W network camera affected versions not specified Description: A reflected XSS issue in the web administration portal of the Axis 207W network camera allows an attacker to execute arbitrary JavaScript via URL. This enables the attacker...
CVE-2023-22984
A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...
New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices
A new variant of the notorious Mirai botnet has been found leveraging several security vulnerabilities to propagate itself to Linux and IoT devices. Observed during the second half of 2022, the new version has been dubbed V3G4 by Palo Alto Networks Unit 42, which identified three different...
