CVE-2023-24734

An arbitrary file upload vulnerability in the cameraupload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file...

CVE-2023-24734

An arbitrary file upload vulnerability in the cameraupload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file...

PT-2023-19758 · Pmb · Pmb

Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: An arbitrary file upload vulnerability in the camera upload.php component allows attackers to execute arbitrary code via a crafted image file. Recommendations: For PMB version 7.4.6, update to a version that fix...

PMB 资源管理错误漏洞

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v7.4.6, which stems from an arbitrary file upload vulnerability contained in the cameraupload.php component. An attacker could exploit the vulnerability to execute...

RedTeam-Physical-Tools - Red Team Toolkit - A Curated List Of Tools That Are Commonly Used In The Field For Physical Security, Red Teaming, And Tactical Covert Entry

 The links of the products may change with time, if so, just ping me on twitter so I can update them. None of the links are affiliated or sponsored. Also, I have personally purchased almost every single item from this list out of my own pocket based on needs for engagements. If there are any oth...

PUB-A-236688120

In appendcamerametadata of camerametadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

Design/Logic Flaw

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution Vulnerability

ABUS Security Camera version TVIP 20000-21150 suffers from local file inclusion, hardcoded credential, and command injection vulnerabilities. When coupled together, they can be leveraged to achieve remote access as root via ssh...

CVE-2022-42838

CVE-2022-42838 affects macOS: camera data access logic could allow a camera extension to continue receiving video after the activating app closes. Impact is limited to local context (ACA/AVL vector) with low overall risk as described; remediation is Apple’s macOS Ventura 13 security update which ...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS version 13 suffers from a security vulnerability that stems from the ability of the Camera Extension to continue receiving video after an active application is closed...

CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

ABUS TVIP 安全漏洞

ABUS TVIP is a series of video surveillance cameras from ABUS Germany. A security vulnerability exists in ABUS TVIP version 20000-21150 that originates from allowing remote attackers to execute arbitrary code...

VulnCheck KEV: CVE-2020-5741

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it...

ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Exploit Title: ABUS Security Camera LFI, RCE and SSH Root Access Date: 2023-02-16 Exploit Author: [email protected] for NetworkSEC NWSSA-001-2023 Vendor Homepage: https://www.abus.com Version/Model: TVIP 20000-21150 probabl...

CVE-2023-26032

ZoneMinder is affected by a SQL Injection in versions prior to 1.36.33 and 1.37.33 via a malicious JSON Web Token. The vulnerability arises because the Username field of the JWT token is trusted during SQL queries, enabling an attacker who can determine the JWT HASH key to forge a token and execu...

Cellinx NVT 路径遍历漏洞

Cellinx NVT IP PTZ is a camera appliance from Cellinx Korea. A path traversal vulnerability exists in Cellinx NVT version v1.0.6.002b, which stems from the presence of a local file disclosure vulnerability...

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...