Foscam IP Video Camera webService dyndns.com DDNS Client Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating...

Foscam IP Video Camera devMng Multi-Camera Port 10000 Command 0x0002 Password Field Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data. Tested Versions...

Foscam IP Video Camera webService oray.com DDNS Client Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating...

Foscam IP Video Camera UPnP Discovery Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs ...

Foscam IP Video Camera devMng Multi-Camera Port 10001 Command 0x0064 Empty AuthResetKey Vulnerability

Summary A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication. Tested Versio...

How to Re-Enable Camera when it is Blocked by Restriction policy

How to Remove Restriction Policy from the iOS Devices without Re-enrolling. For Eg:- Customer has pushed the camera restriction policy to the Delivery Group to block the camera access for the users and now want to remove the unblock the camera to their end users by moving into other delivery grou...

The vulnerability of WIFICAM IP cameras’ microprogramming software lies in the use of pre-installed user accounts, allowing intruders to gain access to the root account.

The vulnerability of the authentication service for WIFICAM microprogrammed software cameras relates to the use of pre-installed accounts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the root account through a TELNET connection...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2017-36259)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Camera is a camera program developed by Qualcomm. An information disclosure vulnerability exists in Qualcomm Camera in Android. The vulnerability can be exploited by an...

FLIR Thermal Camera Remote Code Execution

A remote code execution vulnerability exists in FLIR Thermal cameras. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

The vulnerability of the Camera component in the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Camera component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ONVIF Stream URI

Nessus was able to retrieve the remote devices video stream URIs by sending GetProfiles and GetStreamUri ONVIF requests. include"compat.inc"; if description scriptid104275; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2017/10/31 18:41:24 $"; scriptnameenglish:"ONVIF Stream URI";...

iPhone Apps With Camera Permissions Can Secretly Take Your Photos Without You Noticing

Are you a proud iPhone owner? If yes, this could freak you up. Trust me! Your iPhone has a serious privacy concern that allows iOS app developers to take your photographs and record your live video using both front and back camera—all without any notification or your consent. This alarming privac...

iPhone apps can access cameras to secretly take photos and record videos

By Waqas There was a time when Apple devices were considered secured This is a post from HackRead.com Read the original post: iPhone apps can access cameras to secretly take photos and record videos...

Cross site scripting

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...

CVE-2017-15885

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...

CVE-2017-15885

Axis 2100 Network Camera 2.03 is associated with CVE-2017-15885: a reflected XSS in the web administration portal that allows arbitrary JavaScript execution via the conf_Layout_OwnTitle parameter to view/view.shtml. This entry may overlap with CVE-2007-5214. The connected documents confirm the vu...

VulnCheck KEV: CVE-2017-8225

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

ONVIF Camera Snapshot

Nessus was able to acquire a snapshot from the remote camera using the GetProfiles and GetSnapshotUri ONVIF requests. include"compat.inc"; if description scriptid103867; scriptversion"$Revision: 1.3 $"; scriptcvsdate"$Date: 2017/11/15 18:01:11 $"; scriptnameenglish:"ONVIF Camera Snapshot";...

Design/Logic Flaw

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config files and extendword.txt...

The vulnerability of the G-Cam/EFD-2250 IP camera’s microprogramming software lies in the improper elimination of certain elements in the data request logic, allowing a intruder to execute arbitrary code.

The vulnerability of the G-Cam/EFD-2250 IP camera’s microprogramming software is related to improper elimination of certain elements in the data query logic. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the operating system with root privileges...