7807 matches found
CVE-2021-30256
CVE-2021-30256 describes a stack overflow caused by improper validation of the camera name length before copying the name in VR Service on Qualcomm/Snapdragon platforms (Snapdragon Compute, Connectivity, Consumer IoT, Industrial IoT). Connected sources corroborate exposure within Qualcomm compone...
Airline Passenger Mistakes Vintage Camera for a Bomb
I feel sorry for the accused: The "security incident" that forced a New-York bound flight to make an emergency landing at LaGuardia Airport on Saturday turned out to be a misunderstanding -- after an airline passenger mistook another travelers camera for a bomb, sources said Sunday. American...
High Infinity Technology HiKam S6 1.3.26 Spoofing / Broken Authentication Vulnerability
High Infinity Technology HiKam S6 versions 1.3.26 and below suffer from broken authentication, enumeration, message protocol downgrade, insufficient use of cryptography, insufficient message protocol checks, device spoofing, outdated components, and weak default credential vulnerabilities. suffer...
Compro Technology IP Camera Denial Of Service (CVE-2021-40378)
A denial of service vulnerability exists in Compro Technology IP Camera. Successful exploitation of this vulnerability could result in denial of service conditions...
D-Link DCS-5000L and DCS-932L Elevation of Privilege Vulnerability
D-link Dcs-5000L is an Ip network surveillance camera. d-link Dcs-932L is a network surveillance camera. d-link DCS-5000L and DCS-932L elevation of privilege vulnerability, an attack to can be exploited to compromise the camera configuration and allow a malicious user on the LAN to access the...
CVE-2021-41503
DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This...
D-link Dcs-932L和D-link Dcs-5000L 安全漏洞
D-link Dcs-5000L is an Ip network surveillance camera. d-link Dcs-932L is a network surveillance camera. d-link DCS-5000L and DCS-932L elevation of privilege vulnerability, an attack to can be exploited to compromise the camera configuration and allow a malicious user on the LAN to access the...
PT-2021-23315 · D Link · Dcs-932L +1
Name of the Vulnerable Software and Affected Versions: DCS-5000L version 1.05 and earlier DCS-932L version 2.17 and earlier Description: The issue is related to incorrect access control, allowing malicious users on the LAN to access the device due to the use of basic authentication for the device...
UDP Technology IP Camera Command Injection (CVE-2021-33544)
A command injection vulnerability exists in UDP Technology IP Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Geutebruck Camera Deface
This module will take an existing session on a vulnerable Geutebruck Camera and will allow the user to either freeze the camera and display the last image from the video stream, display an image on the camera, or restore the camera back to displaying the current feed/stream. Module Options msf us...
Weak Password Vulnerability in Smart Camera of Shenzhen Anjiavision Information Technology Co.
Shenzhen Anjoy Vision Information Technology Co., Ltd. hereinafter referred to as: Anjoy Vision is a high-tech enterprise integrating R&D, production, sales and service. Shenzhen Anjoy Vision Information Technology Co., Ltd. smart camera has a weak password vulnerability, which can be exploited b...
Hikvision IP Camera Unauthenticated Command Injection
This module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This module...
Metasploit Wrap-Up
Clone your way to code execution We’ve had a busy week bringing you exploits, features, enhancements, and fixes. Exploit modules for Git and El Finder lead the pack this week with an information disclosure against Jira and a post exploitation module targeting Geutebruck white-labelled cameras to...
Dahua IPC 授权问题漏洞
The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...
CVE-2021-33552
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33553
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33554
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33550
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...