D-Link DCS-2103 Cross-Site Request Forgery Vulnerability

D-link DCS-2103 is a network camera product from AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-2103. A remote attacker can exploit this vulnerability to perform unauthorized operations...

Yodobashi Camera Yodobashi for Android Security Bypass Vulnerability

Yodobashi Camera Yodobashi for Android is a large-scale Android-based chain shopping website by Yodobashi Camera, which sells a wide range of household electrical appliances, computers, cosmetics and designer bags. A security bypass vulnerability exists in Yodobashi Camera Yodobashi for Android. ...

Yodobashi Camera Yodobashi APP for Android Sensitive Information Disclosure Vulnerability

Yodobashi Camera Yodobashi Camera is another more outstanding representative of Japan's urban home appliance mass market.Yodobashi Camera Yodobashi APP for Android is Yodobashi Camera Yodobashi for Android App. A security vulnerability exists in the Yodobashi Camera Yodobashi APP for Android...

D-Link DCS-2103 1.20 CSRF / Cross Site Scripting Vulnerabilities

Exploit for hardware platform in category web applications There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware...

Dahua Camera onvif Protocol Authentication Vulnerability

Zhejiang Dahua Technology Co., Ltd. is a leading supplier of surveillance products and solution service providers, providing leading video storage, front-end, display control and intelligent transportation series of products for the world. Dahua IPC-HF2100 and other cameras onvif protocol snapsho...

Android new vulnerability: hackers control camera to take pictures to upload-vulnerability warning-the black bar safety net

According to foreign media reports, the former Google engineer Simon Isidore（Szymon Sidor found the Android system there is a new vulnerability, the vulnerability would allow malicious software to control Android device on the camera, and the user unknowingly take pictures, can even upload photos...

AirLink101 SkyIPCam1620W 'snwrite.cgi' OS Command Injection Vulnerability

AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera is a wireless network camera product. The AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera 'snwrite.cgi' script fails to validate the filtering of user-submitted inputs, allowing remote attackers to exploit the submitted...

AirLive IP Surveillance Camera there is a command injection vulnerability, a large number of products affected-vulnerability warning-the black bar safety net

A large number of AirLive IP Surveillance Camera is exposed there is a command injection vulnerability, an attacker can use this vulnerability to steal user login credentials and control equipment. The vulnerability principle and scope of impact OvisLink company manufactured a large number of...

Grandstream GXV3611_HD Camera SQL Injection Vulnerability

Grandstream GXV3611HD camera is a network camera product of American Trend Network Grandstream. The Grandstream GXV3611HD camera suffers from a SQL injection vulnerability that can be exploited by a remote attacker to execute arbitrary SQL commands by creating a TELNET session with a specially...

AirLink101 SkyIPCam1620W OS Command Injection

The SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera is vulnerable to an OS Command Injection Vulnerability in the snwrite.cgi binary. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2015-2866

SQL injection vulnerability on the Grandstream GXV3611HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to establish a TELNET session with a crafted username...

AirLive 系列 IP 摄像头命令注入漏洞

大量AirLive IP监控摄像机被曝存在命令注入漏洞，攻击者可利用该漏洞窃取用户登录凭证并控制设备。漏洞原理及影响范围OvisLink公司制造的大量AirLive IP监控摄像机中都存在着命令注入漏洞，通过该漏洞，网络攻击者可以解码用户登录凭证，并可以完全控制监控设备。根据Core安全公司的专家们的消息，至少5种不同型号的AirLive监控摄像机都受此漏洞的影响。这5种型号的监控摄像机分别如下：1、AirLive BU-2015，固件版本1.03.18 16.06.20142、AirLive BU-3026，固件版本1.43 21.08.20143、AirLive...

Grandsteam GXV3611_HD camera is vulnerable to SQL injection

Overview The Grandsteam GXV3611HD is an IP network camera used for surveillance and security. The Grandsteam GXV3611HD is vulnerable to a SQL injection attack. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2015-2866The Grandstream...

Samsung Flaw Lets Hacker Easily Take Control of Your Galaxy Mobile Remotely

More than 600 Million users of Samsung Galaxy smartphones, including the newly released Galaxy S6, are potentially vulnerable to a software bug that allows hackers to secretly monitor the phone's camera and microphone, read text messages and install malicious apps. The vulnerability is due to a...

Fedora 21 : armacycles-ad-0.2.8.3.3-1.fc21 (2015-9504)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

Fedora 20 : armacycles-ad-0.2.8.3.3-1.fc20 (2015-9527)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

[SECURITY] Fedora 20 Update: ufraw-0.21-1.fc20

UFRaw is a tool for opening raw format images of digital cameras...

Use-After-Free camera driver exploit

A use-after-free vulnerability in the camera driver of Qualcomm MSM 7x30 SoCs...

Dahua camera ddns settings have a design flaw

Zhejiang Dahua Technology Co., Ltd. is a leading supplier of surveillance products and solution service providers, providing leading video storage, front-end, display control and intelligent transportation products for the world. Dahua camera ddns settings have a security vulnerability, allowing...

FTP Media Server 3.0 - Authentication Bypass / Denial of Service

!/usr/bin/env python ================================================================================== Exploit Title: FTP Media Server 3.0 - Authentication Bypass and Denial of Service Date: 2015-05-25 Exploit Author: Wh1t3Rh1n0 Michael Allen Exploit Author's Homepage: http://www.mikeallen.org...