7807 matches found
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit
Exploit for hardware platform in category web applications Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@email protected" Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected...
CVE-2019-3948
The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R an...
CVE-2019-3948
CVE-2019-3948 impacts Amcrest IP2M-841B and several Dahua cameras/NVRs that expose HTTP endpoint /videotalk without authentication. An unauthenticated remote attacker can connect to this endpoint and potentially listen to device audio. Public documentation across multiple sources confirms the iss...
CVE-2019-2290
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W,...
Open redirect
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W,...
CVE-2019-2290
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W,...
CVE-2019-2290
CVE-2019-2290 affects the Qualcomm camera stack across Snapdragon devices. The root cause is a race condition where multiple threads opening/closing the camera driver can cause access to a destroyed session data pointer, potentially impacting camera operation. Documents from NVD and Red Hat descr...
Geutebruck IP Camera GCam Efd2250 Remote Code Execution (CVE-2017-5173; CVE-2017-5174)
A remote code execution vulnerability exists in Geutebruck IP Camera GCam Efd2250 Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
On the IoT road: perks, benefits and security of moving smartly
Kaspersky has repeatedly investigated security issues related to IoT technologies for instance, here, or here. Earlier this year our experts have even gained foothold in the security of biomechanical prosthetic devices. The same implies to smart car security: our own research has indicated that...
Zoom Vulnerability
The Zoom conferencing app has a vulnerability that allows someone to remotely take over the computer's camera. It's a bad vulnerability, made worse by the fact that it remains even if you uninstall the Zoom app: This vulnerability allows any website to forcibly join a user to a Zoom call, with...
Vivotek FD8136 Command Injection Vulnerability (CNVD-2019-22783)
Vivotek FD8136 is a hemispherical network camera from Vivotek, Taiwan, China. A command injection vulnerability exists in the Vivotek FD8136. The vulnerability arises from a network system or product not properly filtering specific elements of externally input data during the construction of...
Unspecified vulnerability in Amcrest IPM-721S (CNVD-2019-24194)
The Amcrest IPM-721S is a wireless IP camera from Amcrest. A security vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. An attacker can exploit the vulnerability to download administrative credentials...
Unspecified vulnerability in Amcrest IPM-721S (CNVD-2019-24195)
The Amcrest IPM-721S is a wireless IP camera from Amcrest. An unspecified security vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. An attacker can exploit the vulnerability to add another user's camera to the attacker's cloud account and take full control of the...
Vivotek FD8136 Command Injection Vulnerability
Vivotek FD8136 is a hemispherical network camera from Vivotek, Taiwan, China. A command injection vulnerability exists in the Vivotek FD8136, which can be exploited by an attacker to execute an illegal command if a network system or product fails to properly filter specific elements of externally...
Vivotek FD8136 Buffer Overflow Vulnerability
Vivotek FD8136 is a hemispherical network camera from Vivotek, Taiwan, China. A buffer overflow vulnerability exists in the Vivotek FD8136, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
Vulnerability in Zoom video conference app lets Mac’s camera hijacking
By Waqas The vulnerability in the Zoom video conference app lets attackers hijack Mac's camera by merely using malicious websites. The Zoom video conference app is currently being used by millions of users around the world and that makes it a lucrative target for cybercriminals. Jonathan Leitschu...
CVE-2019-13450
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...
CVE-2019-13450
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...
Directory traversal
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerab...
CVE-2019-13450
CVE-2019-13450 affects Zoom Client for macOS up to version 4.4.4 (and RingCentral 7.0.136380.0312) where any web site can interact with the local Zoom Web server on localhost ports 19421/19424, allowing a remote attacker to force a user to join a video call with the camera active. Root cause: ins...