CVE-2017-3003

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3003

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution...

Design/Logic Flaw

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3003

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution...

PT-2017-1463 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.221 and earlier Description: The issue is related to an interaction between the privacy user interface and the ActionScript 2 Camera object, which leads to a use after free vulnerability. This vulnerability...

Command injection

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

Cross site request forgery (csrf)

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

CVE-2017-5675

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

CVE-2017-5674

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

CVE-2017-5675

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

CVE-2017-5675

The CVE-2017-5675 issue affects a custom GoAhead web server used in Foscam, Vstarcam, and multiple white-label IP cameras. The mail.htm page’s mail-sending form allows an attacker to inject a command into the receiver1 field, which is then executed with root privileges. The vulnerability is trigg...

On IP Camera Backdoors, Comey, Going Dark, Hacking Back and More

Mike Mimoso and Chris Brook discuss the news of the week including a rash of new IP camera backdoors, James Comey’s talk at Boston College, hacking back vs. active defense, and the DOJ dropping one of its Playpen cases. Download: ThreatpostNewsWrapMarch102017.mp3 Music by Chris Gonsalves...

Android Qualcomm camera driver elevation of privilege vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An elevation of...

Google Android Qualcomm Camera Driver Information Disclosure Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An information...

Android Qualcomm camera driver elevation of privilege vulnerability (CNVD-2017-02814)

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An elevation of...

Android Qualcomm camera driver elevation of privilege vulnerability (CNVD-2017-02812)

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm camera Driver is one of the camera drivers used in the... Qualcomm camera driver is one of the camera drivers develope...

Wireless IP Camera (P2P) WIFICAM GoAhead Backdoor / Remote Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Wireless IP Camera P2P WIFICAM cameras and vulnerabilities in GoAhead Advisory URL: https://pierrekim.github.io/advisories/2017-goahead-camera-0x00.txt Blog URL:...

CVE-2017-0521

An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0521

An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

UBUNTU-CVE-2016-8477

An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...