Lucene search
+L

9238 matches found

Rapid7 Blog
Rapid7 Blog
•added 2023/12/27 4:00 p.m.•48 views

There’s One Last Gift Under the Tree, It’s Hands-On IoT!

It’s the holiday season and since we’re in a giving mood we thought we’d surprise our loyal readers with a fun, hands-on hardware exercise to enjoy during some well-earned downtime. But first, a little background. Every year Rapid7 has a pretty solid presence at DefCon in Las Vegas. This year was...

7.1AI score
SaveExploits0
HackRead
HackRead
•added 2023/12/25 3:26 p.m.•56 views

Vietnamese Group Hacks and Sells Bedroom Camera Footage

By Waqas Cheap Security, Costly Privacy: Vietnamese Group Profits from Hacked Home Cameras by Selling Bedroom Camera Footage- Change Your Passwords Now! This is a post from HackRead.com Read the original post: Vietnamese Group Hacks and Sells Bedroom Camera Footage...

7.3AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/12/20 2:51 a.m.•12 views

SUSE CVE-2013-4739

The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via 1 a crafted MSMMCRIOCTLEVTGET ioctl call, related to...

4.9CVSS6.3AI score0.00272EPSS
SaveExploits0References3
NVD
NVD
•added 2023/12/18 1:15 p.m.•53 views

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

5.3CVSS0.00595EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/18 1:15 p.m.•23 views

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

5.3CVSS5.8AI score0.00595EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/18 1:15 p.m.•36 views

Information disclosure

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

5CVSS6.9AI score0.00595EPSS
SaveExploits0References1Affected Software6
Cvelist
Cvelist
•added 2023/12/18 1:02 p.m.•55 views

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

5.3CVSS5.5AI score0.00595EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/18 1:02 p.m.•21 views

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

5.3CVSS6.7AI score0.00595EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/18 1:02 p.m.•102 views

CVE-2022-41677

CVE-2022-41677 affects Bosch IP camera devices. Concrete affected models/versions surfaced in external sources: Bosch CPP14 (firmware ≤ 8.80), CPP13 (≤ 8.48), CPP7.3 (≤ 7.86), and others. The issue is an information-disclosure vulnerability allowing an unauthenticated attacker to retrieve device ...

5.3CVSS5.2AI score0.00595EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/12/18 12:00 a.m.•19 views

Bosch IP cameras security breach

Bosch IP cameras are network cameras from Bosch, Germany. A security vulnerability exists in Bosch IP cameras that could allow a user with administrative privileges to run arbitrary commands on the camera's operating system. The following products and versions are affected: Bosch Camera CPP13...

7.2CVSS6.9AI score0.01472EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•8 views

CVE-2022-41677: Improper Access Control

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

5.3CVSS6AI score0.00595EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
•added 2023/12/13 12:04 p.m.•17 views

Surveillance by the US Postal Service

This is not about mass surveillance of mail, this is about the sorts of targeted surveillance the US Postal Inspection Service uses to catch mail thieves: To track down an alleged mail thief, a US postal inspector used license plate reader technology, GPS data collected by a rental car company,...

7.1AI score
SaveExploits0
NVD
NVD
•added 2023/12/08 4:15 p.m.•37 views

CVE-2023-48414

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS0.00109EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/08 4:15 p.m.•24 views

Design/Logic Flaw

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

4CVSS7.4AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/08 3:44 p.m.•108 views

CVE-2023-48414

CVE-2023-48414 affects the Pixel Camera Driver. It describes a use-after-free due to a logic error, enabling local escalation of privilege with System privileges required and no user interaction. The vulnerability is categorized as EoP with a moderate impact in Pixel security bulletins, and no pu...

6.7CVSS6.7AI score0.00109EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/08 3:44 p.m.•48 views

CVE-2023-48414

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

7AI score0.00109EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/08 12:00 a.m.•28 views

Google Pixel Resource Management Error Vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a logic error in the code of the Pixel Camera Driver, which may be used after release...

6.7CVSS6.7AI score0.00109EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/08 12:00 a.m.•21 views

PT-2023-30835 · Google · Pixel Camera Driver

Name of the Vulnerable Software and Affected Versions: Pixel Camera Driver affected versions not specified Description: The issue is related to a possible use after free due to a logic error in the code of the Pixel Camera Driver. This could lead to local escalation of privilege with System...

6.7CVSS6.7AI score0.00109EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•4 views

CVE-2023-48414: Use After Free

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS7AI score0.00109EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/05 3:15 a.m.•43 views

CVE-2023-22383

Memory Corruption in camera while installing a fd for a particular DMA buffer...

7.8CVSS0.0014EPSS
SaveExploits0References1
Rows per page
Query Builder