CVE-2024-33065

CVE-2024-33065 describes a memory corruption issue arising when a camera driver sets an offset variable during snapshot, leading to potential memory corruption. The vulnerability is associated with Qualcomm chipsets and camera driver code; the root cause is an improper handling of an offset varia...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the inclusion of an improper input validation issue in Camera...

PT-2024-25103

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description There is a memory corruption issue that occurs when taking a snapshot, specifically when a camera driver sets an offset variable. This issue can potential...

CVE-2024-47789

UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP...

CVE-2024-47790

UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol RTSP version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed...

CVE-2024-47789 Credential Leakage Vulnerability

UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP...

CVE-2024-47789

The CVE-2024-47789 entry concerns D3D Security IP Camera D8801. The vulnerability arises from a weak authentication scheme in the HTTP header protocol, where the authorization tag contains a Base-64 encoded username and password. A remote attacker could exploit this by crafting an HTTP packet, re...

D3D Security IP Camera 安全漏洞

D3D Security IP Camera is a series of cameras from D3D Security. A security vulnerability exists in D3D Security IP Camera that stems from a weak authentication scheme used by the HTTP header protocol, resulting in the exposure of user credentials on the target device...

D3D Security IP Camera 安全漏洞

D3D Security IP Camera is a series of cameras from D3D Security. A security vulnerability exists in the D3D Security IP Camera that stems from the use of an insecure version of the Live Streaming Protocol for live video streaming, resulting in unauthorized access to real-time information on the...

The vulnerability of the Message Handler component in Hikvision’s microprogrammed IP cameras DS-7604NI-K1/4P(B) allows a intruder to trigger a service failure.

The vulnerability of the Message Handler component in Hikvision’s DS-7604NI-K1/4PB microprogrammed software cameras is related to the handling of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the HNAP wireless HD camera software allows a intruder to execute arbitrary code.

The vulnerability of the HNAP microprogramming software for D-Link DCS-960L wireless HD cameras is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2024-45599

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...

Cursor 安全漏洞

Cursor is an AI code editor from Cursor Open Source. A security vulnerability exists in versions of Cursor prior to 0.41.0, which stems from the fact that if a user on macOS has granted Cursor access to the camera or microphone, any program running on the machine can access the camera or micropho...

CVE-2024-45599 TCC Bypass in Cursor's macOS Application

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...

CVE-2024-45599 TCC Bypass in Cursor's macOS Application

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...

Necro Android Malware Found in Popular Camera and Browser Apps on Play Store

Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious apps have also been found on the Google Play Store. They have been cumulatively...

PT-2024-31700 · Cursor · Cursor

Name of the Vulnerable Software and Affected Versions: Cursor versions prior to 0.41.0 Description: The issue affects Cursor, an artificial intelligence code editor, on macOS. If a user has granted Cursor access to the camera or microphone, any program run on the machine can access these devices...

CVE-2024-46959

runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audio stream...

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Google has announced that it's rolling out a new set of features to its Chrome browser that gives users more control over their data when surfing the internet and protects them against online threats. "With the newest version of Chrome, you can take advantage of our upgraded Safety Check, opt out...

runofast Indoor Security Camera for Baby Monitor 安全漏洞

runofast Indoor Security Camera for Baby Monitor is a 1080P HD home monitoring device for baby monitoring. A security vulnerability exists in the runofast Indoor Security Camera for Baby Monitor that stems from the default password for the root account being password. this allows access to the...