CVE-2017-6342

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically lo...

CVE-2017-6341

CVE-2017-6341 affects Dahua DHI-HCVR7216A-S3 devices (NVR 3.210.0001.10, Camera 2.400.0000.28.R, SmartPSS 1.16.1). The web/mobile/desktop interfaces return cleartext passwords in responses, enabling remote attackers to obtain sensitive data by sniffing the network. Related entries describe additi...

D-Link DCS Series Cameras - Insecure Crossdomain

D-Link DCS Series Cameras - Insecure Crossdomain Exploit Title: Insecure CrossDomain.XML in D-Link DCS Series Cameras Date: 22/02/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on...

D-Link DCS Series Cameras - Insecure Crossdomain

Exploit Title: Insecure CrossDomain.XML in D-Link DCS Series Cameras Date: 22/02/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-933L with firmware version 1.03. Other...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability in NVIDIA’s Android operating system camera driver is related to code errors. Exploiting this vulnerability can allow a remote attacker to cause a permanent service failure locally, which may require a reinstallation of the operating system to restore the device. This issue is...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

The vulnerability in Qualcomm’s components, including the camera driver and video driver, as well as the Android operating system, is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a remote attacker to gain access to data at levels beyond their authoriz...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s camera is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malware application within the kernel context. This issue is considered “high” because it...

Geutebruck G-Cam/EFD-2250 Authentication Bypass Vulnerability

The Geutebruck G-Cam/EFD-2250 provides a faster and more secure solution for remote monitoring applications. An authentication bypass vulnerability exists in the Geutebruck G-Cam/EFD-2250. An attacker could exploit this vulnerability to gain unauthorized access in an affected device environment...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the camera driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malware code within the kernel context. This issue is considered “high” because it requires...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the camerafdvt.c driver of the MT6573FDVTSetRegHW application of the MediaTek Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially created application...

PT-2017-2911 · Geutebruck · G-Cam/Efd-2250

Name of the Vulnerable Software and Affected Versions: Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12 Description: The issue is related to the improper neutralization of special elements in the logic of data requests, which can allow a remote attacker to gain access to the operating system...

NETWAVE IP Camera Password Disclosure Vulnerability

NETWAVE IP Camera is a webcam product. NETWAVE IP Camera suffers from a password disclosure vulnerability, which allows an attacker to obtain the username and password of the device via POC code, resulting in a password disclosure risk...

UBUNTU-CVE-2017-5367

Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample...

Netwave IP Camera Server - Password Disclosure

No description provided by source. !/usr/bin/python2.7 Run the exploit against the victim to get WIFI password If the victim is vulnerable to memory leak it will try to extract the username and password for the weblogin magic for you bash: wget -qO- http://HOST:PORT//proc/kcore | strings wget -qO...

Netwave IP Camera - Password Disclosure

!/usr/bin/python2.7 spiritnullatsigaint.org Run the exploit against the victim to get WIFI password If the victim is vulnerable to memory leak it will try to extract the username and password for the weblogin magic for you bash: wget -qO- http://HOST:PORT//proc/kcore | strings wget -qO-...

Netwave IP Camera - Password Disclosure

Netwave IP Camera - Password Disclosure !/usr/bin/python2.7 spiritnullatsigaint.org Run the exploit against the victim to get WIFI password If the victim is vulnerable to memory leak it will try to extract the username and password for the weblogin magic for you bash: wget -qO-...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

The vulnerability in the Android operating system’s camera driver relates to the lack of protection for privileged data. Exploiting this vulnerability allows a malicious actor to gain access to local malicious applications without being restricted by permissions. This issue is rated as “moderate,...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm camera kernel driver in the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious application...

CVE-2016-6492

The MT6573FDVTSetRegHW function in camerafdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOCTSETFDCONFCMD IOCTL call...

CVE-2016-8469

An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID...