CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-48214

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

PT-2024-33028 · Tuya · Kerui Hd 3Mp 1080P Tuya Camera

Name of the Vulnerable Software and Affected Versions: KERUI HD 3MP 1080P Tuya Camera version 1.0.4 Description: The issue concerns a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom,...

CVE-2024-48214

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

Kerui HD 3MP 1080P Tuya Camera 安全漏洞

Kerui HD 3MP 1080P Tuya Camera is a high-definition surveillance camera from Kerui. A security vulnerability exists in Kerui HD 3MP 1080P Tuya Camera version 1.0.4, which stems from the presence of a command injection vulnerability that allows an attacker to create a customized, unauthenticated Q...

CVE-2024-48214

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

JVN#11779839: Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials

Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP. The user can select which to use on the GUI configuration page. Both the services provide their APIs accessible via HTTP and HTTPS, but old firmware versions of...

CVE-2024-48214: Improper Neutralization of Special Elements used in a Command

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

CVE-2024-48214

The KERUI HD 3MP 1080P Tuya Camera (version 1.0.4 ) is susceptible to a command injection vulnerability within the module responsible for local network connection via QR codes. An attacker can create a custom, unauthenticated QR code containing malicious JSON data. By abusing the SSID or PASSWORD...

PT-2024-9330 · Lorex · Lorex 2K Indoor Wi-Fi Security Camera

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111 Description: An unauthenticated attacker can perform an out of bounds heap read in the IQ Service TCP port 9876. This issue is related to a buffer overflow in...

PT-2024-9304

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111 Description: An authenticated attacker can trigger a stack-based buffer overflow in the DHIP Service TCP port 80. This issue allows a remote attacker to...

edisgo (0.2.0), opencv-browser-camera (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-49766 via werkzeug (2.2.0)

werkzeug PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - edisgo 0.2.0 - opencv-browser-camera =0.1.0, =0.1.2 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2024-48644: Observable Discrepancy

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

Reolink Duo 2 WiFi Camera 安全漏洞

Reolink Duo 2 WiFi Camera is a camera from Reolink USA. A security vulnerability exists in Reolink Duo 2 WiFi Camera version v3.0.0.188923031701, which stems from the presence of an account enumeration vulnerability that could allow a remote attacker to determine a valid user account via a login...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...