CVE-2013-1603

Summary of CVE-2013-1603 and related D-Link IP Camera vulnerabilities (CVE‑2013‑1599, -1600, -1601, -1602, -1603): Core Security’s CORE-2013-0303 advisory documents OS command injection, several authentication issues, information leakage, and hard-coded credentials affecting D‑Link IP cameras (mo...

A week in security (January 20 – 26)

Last week on Malwarebytes Labs, we reported on a Ryuk ransomware attack on The Tampa Bay Times, a newspaper in Florida; unmasked an elaborate browser locking scheme behind the more advanced tech support operations that are currently active; and looked at the latest laws on regulating deepfakes...

CVE-2013-1595

A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service...

CVE-2013-1596

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554...

Authentication flaw

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554...

CVE-2013-1596

CVE-2013-1596 is an RTSP authentication bypass affecting Vivotek PT7135 IP Camera firmware 0300a and 0400a, exploitable via specially crafted RTSP packets sent to TCP port 554, enabling an unauthenticated remote attacker to access the video stream. The Core Security CoreLabs advisory and related ...

CVE-2013-1596

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554...

CVE-2013-1594

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...

Information disclosure

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...

CVE-2013-1595

A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service...

CVE-2013-1595

CVE-2013-1595 is a remote buffer overflow in Vivotek PT7135 IP Camera firmware 0300a/0400a. Exploitation requires sending a crafted RTSP packet with an inflated Authorization header to the RTSP service (port 554), which can overwrite the instruction pointer and allow remote code execution or caus...

CVE-2013-1594

Vivotek PT7135 IP cameras with firmware 0300a/0400a are affected by CVE-2013-1594 and related vulnerabilities involving information leakage via GET requests. CoreLabs describes that wireless keys and third‑party credentials are stored in clear text (FTP, share, SMTP, WEP/WPA keys, DynDNS, etc.), ...

CVE-2013-1594

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...

CVE-2019-10583

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605,...

Design/Logic Flaw

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605,...

CVE-2019-10583

CVE-2019-10583 concerns a use-after-free in the camera sensor data path when using direct report mode across multiple Snapdragon platforms (Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Wearables). The issue affects camera access to sensor data in direct report mode on devices including APQ8096...

CVE-2019-10583

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605,...

Police Surveillance Tools from Special Services Group

Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...

File upload vulnerability of network video camera of Zhejiang Yuzhe Technology Co.

Zhejiang YUVAD Technology Co., Ltd. is a global solution provider for public safety and intelligent transportation. A file upload vulnerability exists in the network video camera of Zhejiang YUV Technology, which can be exploited by an attacker to gain administrator privileges of the affected...

Plex Media Server < 1.18.2.2041 RCE Vulnerability

Plex Media Server is prone to an authenticated remote code execution RCE vulnerability in the Camera Upload feature. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...