“HM Surf” macOS Flaw Lets Attackers Access Camera and Mic – Patch Now!

Researchers at Microsoft discovered a new macOS vulnerability, "HM Surf" CVE-2024-44133, which bypasses TCC protections, allowing unauthorized access…...

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...

CVE-2024-48791

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

Robot vacuum cleaners hacked to spy on, insult owners

Multiple robot vacuum cleaners in the US were hacked to yell obscenities and insults through the onboard speakers. ABC news was able to confirm reports of this hack in robot vacuum cleaners of the type Ecovacs Deebot X2, which are manufactured in China. Ecovacs is considered the leading service...

Plug n Play Camera com.starvedia.mCamView.zwave 安全漏洞

Plug n Play Camera com.starvedia.mCamView.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update...

CVE-2024-48791

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48791

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48791: Missing Authentication for Critical Function

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48791

A security vulnerability exists in the Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1 driver. A remote attacker can exploit this issue to obtain sensitive information by targeting the firmware update process . The root cause is identified as missing authentication for a critical fu...

CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48775

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

Plug n Play Camera com.ezset.delaney 安全漏洞

Plug n Play Camera com.ezset.delaney is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.ezset.delaney version 1.2.0, which originated from an issue that allows remote attackers to obtain sensitive information through the firmware update process...

CVE-2024-48775

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48775

A security vulnerability exists in Plug n Play Camera com.ezset.delaney version 1.2.0 , a camera driver. The issue allows a remote attacker to obtain sensitive information through the firmware update process . This vulnerability is associated with CWE-306 (Missing Authentication for Critical Func...

PT-2024-33211 · Unknown · Plug N Play Camera

Name of the Vulnerable Software and Affected Versions: Plug n Play Camera com.ezset.delaney version 1.2.0 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.2.0, update the firmware to a version that...

CVE-2024-48770

The Plug n Play Camera com.wisdomcity.zwave (version 1.1.0 ) is vulnerable to an issue that allows a remote attacker to obtain sensitive information during the firmware update process . The vulnerability is associated with CWE-922 (Insecure Storage of Sensitive Information). As of the current doc...

CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48775

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48775: Missing Authentication for Critical Function

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...