CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

Deepfakes Are Being Used to Circumvent Facial Recognition Systems

By Habiba Rashid Camera Injection Attacks: The New Threat to Facial Recognition Security. This is a post from HackRead.com Read the original post: Deepfakes Are Being Used to Circumvent Facial Recognition Systems...

CVE-2023-38906

An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message...

camerastorelasvegas.com Cross Site Scripting vulnerability OBB-3597113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating

Security researchers accessed an internal camera inside the Deckmate 2 shuffler to learn the exact deck order—and the hand of every player at a poker table...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection.This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection.This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386 SQLi in a2 Camera Trap Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3386

CVE-2023-3386 affects the a2 Camera Trap Tracking System prior to version 3.1905. The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, affecting the product’s ability to protect data and operate reliably. CVSS 3.1 base score 9.8 (Network attack, no ...

CVE-2023-3386 SQLi in a2 Camera Trap Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-28576 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver

The buffer obtained from kernel APIs such as cammemgetcpubuf may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header e.g. header.count, causing checks e.g. size checks in kernel code to be invalid. This may lead to...

CVE-2023-28576 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver

The buffer obtained from kernel APIs such as cammemgetcpubuf may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header e.g. header.count, causing checks e.g. size checks in kernel code to be invalid. This may lead to...

a2 Camera Trap Tracking System SQL Injection Vulnerability

a2 Camera Trap Tracking System is a camera trap tracking system from a2 Camera Trap Tracking System. A SQL injection vulnerability exists in a2 Camera Trap Tracking System versions prior to 3.1905 that stems from incorrect neutralization of special elements used in SQL commands...

PT-2023-24518

Name of the Vulnerable Software and Affected Versions a2 Camera Trap Tracking System versions prior to 3.1905 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2023-20797

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582...

CVE-2023-20797

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582...

Out-of-bounds

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582...

CVE-2023-20797

CVE-2023-20797 describes an out-of-bounds write in MediaTek camera middleware caused by a missing bounds check, leading to local escalation of privileges with System execution privileges required and no user interaction needed. The entry cites a patch/issue identifier ALPS07629582 as the mitigati...