ABUS TVIP security vulnerabilities

ABUS TVIP is a series of video surveillance cameras from ABUS Germany. A security vulnerability exists in ABUS TVIP version 20000-21150 that originates from allowing remote attackers to execute arbitrary code...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS version 13 suffers from a security vulnerability that stems from the ability of the Camera Extension to continue receiving video after an active application is closed...

CVE-2022-42838: Operation on a Resource after Expiration or Release

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

CVE-2022-42838

CVE-2022-42838 affects macOS: camera data access logic could allow a camera extension to continue receiving video after the activating app closes. Impact is limited to local context (ACA/AVL vector) with low overall risk as described; remediation is Apple’s macOS Ventura 13 security update which ...

CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

VulnCheck KEV: CVE-2020-5741

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it...

CVE-2023-26032

ZoneMinder is affected by a SQL Injection in versions prior to 1.36.33 and 1.37.33 via a malicious JSON Web Token. The vulnerability arises because the Username field of the JWT token is trusted during SQL queries, enabling an attacker who can determine the JWT HASH key to forge a token and execu...

Cellinx NVT path traversal vulnerability

Cellinx NVT IP PTZ is a camera appliance from Cellinx Korea. A path traversal vulnerability exists in Cellinx NVT version v1.0.6.002b, which stems from the presence of a local file disclosure vulnerability...

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

PT-2023-18810 · Axis · Axis 207W

Name of the Vulnerable Software and Affected Versions: Axis 207W network camera affected versions not specified Description: A reflected XSS issue in the web administration portal of the Axis 207W network camera allows an attacker to execute arbitrary JavaScript via URL. This enables the attacker...

CVE-2023-22984

Axis 207W network camera exposes a reflected XSS in the web administration portal that lets an attacker execute arbitrary JavaScript via a URL. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N with base score 6.1 (Medium). No public fix is documented in the provided sources; some refer...

New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices

A new variant of the notorious Mirai botnet has been found leveraging several security vulnerabilities to propagate itself to Linux and IoT devices. Observed during the second half of 2022, the new version has been dubbed V3G4 by Palo Alto Networks Unit 42, which identified three different...

Camera the Size of a Grain of Salt

Cameras are getting smaller and smaller, changing the scale and scope of surveillance...

What to Look for When Buying a Security Camera (2023): Tips and Risks

Eufy's recent scandal shows it's not so much about the data breach but about how a company responds. Here are a few ways to shop smart...

SUSE CVE-2008-4503

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...