Design/Logic Flaw

Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...

CVE-2023-23543

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...

CVE-2023-23543

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...

Code injection

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...

[SECURITY] Fedora 36 Update: digikam-8.0.0-2.fc36

digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...

[SECURITY] Fedora 37 Update: digikam-8.0.0-2.fc37

digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...

PT-2023-19652 · Milesight · Milesight Ncr/Camera

Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows sensitive information disclosure through an unspecified request. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information abou...

CVE-2023-24505 Milesight NCR/Camera CWE-200: Exposure of Sensitive Information

Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request...

PT-2023-19653 · Milesight · Milesight Ncr/Camera

Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue exposes credentials through an unspecified request. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer version th...

CVE-2023-23543

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...

Milesight NCR/camera 安全漏洞

Milesight is a complete Artificial Intelligence video surveillance solution from the Chinese company Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5. An attacker could exploit the vulnerability to disclose sensitive information via an unspecified request...

CVE-2023-24505

Milesight NCR/camera version 71.8.0.6-r5 is affected by a vulnerability described as an exposure of sensitive information via an unspecified request. Affected component: Milesight NCR/camera (version 71.8.0.6-r5). Root cause: unspecified request leads to disclosure of sensitive information. Impac...

Milesight NCR/camera 安全漏洞

Milesight is a complete Artificial Intelligence video surveillance solution from the Chinese company Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5. An attacker exploited the vulnerability to disclose credentials via an unspecified request...

CVE-2023-23543

CVE-2023-23543 affects Apple platforms (macOS Ventura 13.3; iOS 15.7.4/iPadOS 15.7.4; iOS 16.4/iPadOS 16.4; watchOS 9.4). A sandboxed app may be able to determine which other app is currently using the camera due to restricted observability of app states. Root cause: privacy-related observability...

CVE-2023-23543

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...

CVE-2023-24506

CVE-2023-24506 affects Milesight NCR/camera version 71.8.0.6-r5. Multiple connected sources confirm that credentials are exposed via an unspecified request, leading to a potential confidentiality impact. The CVE has a base score of 7.5 (HIGH) with network attack vector and no user interaction req...

CVE-2023-24505 Milesight NCR/Camera CWE-200: Exposure of Sensitive Information

Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request...

CVE-2023-24506 Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials

Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...

Fleckpe Android Malware Sneaks onto Google Play Store with Over 620,000 Downloads

A new Android subscription malware named Fleckpe has been unearthed on the Google Play Store, amassing more than 620,000 downloads in total since 2022. Kaspersky, which identified 11 apps on the official app storefront, said the malware masqueraded as legitimate photo editing apps, camera, and...

PT-2023-11231 · Undefined · Undefined

Хакеры эксплуатируют уязвимость пятилетней давности, взламывая видеокамеры в банках Исследователи Fortinet FortiGuard Labs предупреждают, что злоумышленники активно эксплуатируют критическую неисправленную уязвимость, влияющую на устройства цифровой видеозаписи DVR TBK. Недостаток, отслеживаемый...