9200 matches found
Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability
No description provided by source. Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The vulnerability can ...
Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Linksys WVC54GCA 1.00R22/1.00R24 Wireless-G Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34714/info Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied data. An attacker may...
Camtron CMNC-200 IP Camera Directory Traversal Vulnerability
No description provided by source. Finding 2: Directory Traversal in Camera Web Server CVE: CVE-2010-4231 The CMNC-200 IP Camera has a built-in web server that is enabled by default. The server is vulnerable to directory transversal attacks, allowing access to any file on the camera file system...
Axis Communications 207W Network Camera Web Interface axis-cgi/admin/restart.cgi CSRF
No description provided by source. source: http://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, a...
obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 events.tar source_ip Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. An attacker may leverage these issues t...
AXIS Camera Control (AxisCamControl.ocx 1.0.2.15) - BoF Exploit
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------- bPoC AXIS Camera Control AxisCamControl.ocx v. 1.0.2.15 SaveBMP Method Buffer Overflow/b original...
Axis Network Camera 2.x And Video Server 1-3 HTTP Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/11011/info A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: - Axis StorePoint CD E100 CD-ROM Server...
obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 help Script XSS
No description provided by source. source: http://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. An attacker may leverage these issues t...
FlexWatch 3.0 AIndex.ASP Authorization Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the...
axis network camera 2.x and video server 1-3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous user...
Camtron CMNC-200 IP Camera Undocumented Default Accounts
No description provided by source. Finding 4: Undocumented Default Accounts CVE: CVE-2010-4233 The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be normally disabled. The...
leadtools activex common dialogs 16.5 - Multiple Vulnerabilities
No description provided by source. LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that h...
TRENDnet SecurView TV-IP121WN Wireless Internet Camera UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow
No description provided by source. TRENDnet SecurView TV-IP121WN Wireless Internet Camera UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow camera demo http://67.203.184.58:9193/admin/view.cgi?profile=0 username=guest password=guest Background: The mentioned...
Axis Communications 207W Network Camera Web Interface admin/restartMessage.shtml server Parameter CSRF
No description provided by source...
NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) - BoF Exploit
No description provided by source. !-- NUVICO DVR NVDV4 / PdvrAtl Module PdvrAtl.DLL 1.0.1.25 remote heap overflow exploit IE7/XP SP2 check a camera demo here: http://www.2mcctv.com/2mdemo.php codebase: http://www.dvrstation.com/pdvratl.php?vendor=0 rgod ///////////////////////////////...
AXIS Camera Detection
Binary data 8301.prm...
CVE-2014-1849
Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...
Code injection
Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...
CVE-2014-1849
CVE-2014-1849 affects Foscam IP cameras (e.g., 11.37.2.49 and other versions) where the DynDNS option generates credentials from predictable camera subdomain names, enabling remote attackers to spoof or hijack cameras and modify camera records on the Foscam DNS server. Impact per NVD indicates co...