CVE-2018-6479

An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to the / URI...

CVE-2018-6479

Netwave IP Camera devices are affected by CVE-2018-6479. The vulnerability allows an unauthenticated attacker to crash a device by sending a POST request with a huge body to the root path (/) of the device. The issue is described consistently across multiple sources (e.g., Red Hat advisory and CN...

Huawei Mate 9 Pro Integer Overflow Vulnerability

Huawei Mate 9 Pro is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 9 Pro suffers from an integer overflow vulnerability, which results in an integer overflow due to the camera driver failing to properly validate an external input parameter and subsequent processing resultin...

Security Advisory - Integer Overflow Vulnerability on Smartphones

There is an integer overflow vulnerability on smartphones. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit...

The vulnerability of the FTP server of the microprogrammed IP camera Jooan A5 allows a hacker to gain access to the device with root privileges.

The vulnerability of the FTP server of the microprogrammed IP camera Jooan A5 IP Camera is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to the device with root privileges...

Master IP CAM 01 Vulnerabilities

Some time ago I analized this ipcam with my friend Dzonerzy: var serialNum="VVVIPCSBC150617Z-06929VjmJH54vkK"; var model="RTIPC"; var hardVersion="5900-gc1004"; var softVersion="V3.3.4.2103-S50-SBC-B20150721E"; var ipcname="WIFICAM"; var startdate="2017-8-5 0:0:2"; var runtimes="0 day, 0:54"; var...

Master IP Camera Detection (HTTP)

HTTP based detection of Master IP Camera devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dahua Technology IP Camera Predictable Password Algorithm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dahua Technology IP Camera. Authentication is not required to exploit this vulnerability. The specific flaw exists within the disaster recovery password functionality. If the device uses its defaul...

MASTER IPCAMERA01 Hardcoded Vulnerability

MASTER IPCAMERA01 is an IP network camera product. A hard-coded vulnerability exists in MASTER IPCAMERA01 version 3.3.4.2103, which originates from the use of a hard-coded password for the root account. An attacker can exploit this vulnerability to gain root privileges...

MASTER IPCAMERA01 misconfiguration vulnerability

MASTER IPCAMERA01 is an IP network camera product. A misconfiguration vulnerability exists in MASTER IPCAMERA01 version 3.3.4.2103. An attacker can exploit the vulnerability to change the configuration...

MASTER IPCAMERA01 File Upload and Download Vulnerability

MASTER IPCAMERA01 is an IP network camera product. A security vulnerability exists in MASTER IPCAMERA01 version 3.3.4.2103. An attacker can exploit the vulnerability to upload and download configuration files...

Code injection

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of the web server...

CVE-2018-5724

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi...

CVE-2017-13210

In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is n...

Zivif PR115-204-P-RS Remote Command Injection Vulnerability

The Zivif PR115-204-P-RS is a webcam device. A remote command injection vulnerability exists in Zivif PR115-204-P-RS version 2.3.4.2103. A remote attacker can exploit this vulnerability to inject arbitrary commands...

Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation

Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Ubiquiti UniFi Video Windows Vendor URL: https://www.ubnt.com Type: Improper Handling of Insufficient Permissions or Privileges CWE-28...

Ichano AtHome IP Camera Arbitrary Command Execution Vulnerability

Ichano AtHome IP Camera is an IP camera product. A security vulnerability exists in Ichano AtHome IP Camera. A remote attacker can exploit the vulnerability to execute arbitrary commands...

CVE-2017-17761

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote LAN unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a id command...

CVE-2017-17761

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote LAN unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a id command...

Command injection

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote LAN unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a id command...