9197 matches found
ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
Cybersecurity researchers have detailed the inner workings of an Android banking trojan called ERMAC 3.0, uncovering serious shortcomings in the operators' infrastructure. "The newly uncovered version 3.0 reveals a significant evolution of the malware, expanding its form injection and data theft...
Linux Distros Unpatched Vulnerability : CVE-2023-28161
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If temporary one-time permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that...
Malicious code in nativescript-sd-camera (npm)
The package nativescript-sd-camera was found to contain malicious code...
MAL-2025-27092 Malicious code in nativescript-sd-camera (npm)
The package nativescript-sd-camera was found to contain malicious code...
AXIS Camera Station和AXIS Camera Station Pro 安全漏洞
AXIS Camera Station and AXIS Camera Station Pro are both a powerful and flexible video management and access control from Axis Sweden. A security vulnerability exists in AXIS Camera Station and AXIS Camera Station Pro that stems from server-side request forgery and could lead to access to interna...
PT-2025-32627 · Axis Communications · Axis Camera Station Pro
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An internal security assessment revealed a Server-Side Request Forgery SSRF issue. An authenticated attacker could exploit this to access internal resources o...
Linux Distros Unpatched Vulnerability : CVE-2019-11748
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of...
Linux Distros Unpatched Vulnerability : CVE-2021-29959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it...
Linux Distros Unpatched Vulnerability : CVE-2025-37971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2dev Commit 42a2f6664e18 staging: vc04services...
Linux Distros Unpatched Vulnerability : CVE-2025-21992
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera USB ID 0408:5473 reports a HID sensor interface that is not actually implemented. Attemptin...
Linux Distros Unpatched Vulnerability : CVE-2019-11749
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of...
CVE-2025-8757
The CVE-2025-8757 entry concerns TRENDnet TV-IP110WN (firmware 1.2.2). Affected component: Embedded Boa Web Server, specifically the /server/boa.conf file. Root cause is described as a least-privilege violation in the manipulated configuration, allowing local attackers to exploit the issue. Explo...
TRENDnet TV-IP110WN 安全漏洞
The TRENDnet TV-IP110WN is a wireless webcam from Trendnet, Inc. A security vulnerability exists in TRENDnet TV-IP110WN version 1.2.2, which stems from a least privilege violation in the file /server/boa.conf...
CVE-2025-21473
Memory corruption when using Virtual cdm Camera Data Mover to write registers...
The vulnerability of the /vb.htm component in the wireless IP camera software of D-Link DCS-6010L allows a attacker to execute XSS attacks.
The vulnerability of the /vb.htm component in the microprogramming software of the D-Link DCS-6010L wireless IP camera is related to the lack of measures taken to protect the website structure when processing the paratest parameter. Exploiting this vulnerability allows a malicious actor to carry...
6,500 Servers Expose Axis Remoting Protocol; 4,000 in U.S. Vulnerable to Exploits
Cybersecurity researchers have disclosed multiple security flaws in video surveillance products from Axis Communications that, if successfully exploited, could expose them to takeover attacks. "The attack results in pre-authentication remote code execution on Axis Device Manager, a server used to...
CVE-2025-27068
CVE-2025-27068 describes memory corruption while processing an IOCTL command with an arbitrary address, affecting Qualcomm chipsets per multiple feeds. The core issue is a problematic handling path during IOCTL processing that can lead to corruption of memory (severity High, CVSSv3.1: 7.8; Local ...
CVE-2025-27068 Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address...
