SUSE: Security Advisory (SUSE-SU-2020:3648-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unauthorized Access Vulnerability in Panasonic-SF335 Camera

Matsushita Electric China Co., Ltd. is an electronics manufacturer that engages in business activities such as the production and sale of various electrical products. An unauthorized access vulnerability exists in the Panasonic-SF335 camera. An attacker can exploit the vulnerability to obtain...

Weak password vulnerability in Zhejiang Dahua camera

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services based on technological innovation. A weak password vulnerability exists in Zhejiang...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Cross-Site Request Forgery Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. The INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to access the web via all fields...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Denial of Service Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A security vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B, which can be exploited to cause a denial of service by an attacker who can reboot the device via a hidden reboot command...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Code Issue Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A security vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B, which can be exploited by an attacker to execute arbitrary code by editing "recdata"...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Cross-Site Scripting Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A cross-site scripting vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B. The vulnerability originates from entering the "goform formSetFtpCfg" settings page via all fields of the FTP...

Beating security fatigue with Troy Hunt, Chloé Messdaghi, and Tanya Janca: Lock and Code S02E06

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we speak to Point3 Security chief strategist Chloé Messdaghi, HaveIBeenPwned founder Troy Hunt, and We Hack Purple founder and CEO Tanya Janca about security fatigue. Security fatigue is...

Caught on Camera: Rethinking IoT Security

We all know that we're on camera pretty much constantly -- most coffee shops, convenience stores, and even offices employ security cameras for protection. But what happens when those devices built to keep us safe become unsafe?...

Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk (important)

openSUSE Security Update: Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk Announcement ID: openSUSE-SU-2021:0520-1 Rating: important References: 1133120 1133124 1175899 1180996 Cross-References: CVE-2021-21261 CVSS scores: CVE-2021-21261 NVD : 8.8...

openSUSE Security Update : flatpak / libostree / xdg-desktop-portal / etc (openSUSE-2021-520)

This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues : libostree : Update to version 2020.8 - Enable LTO. bsc1133120 - This update contains scalability improvements and bugfixes. - Caching-related HTTP headers are now supported on summaries and...

SUSE SLED15 / SLES15 Security Update : flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk (SUSE-SU-2021:1094-1)

This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues : libostree : Update to version 2020.8 Enable LTO. bsc1133120 This update contains scalability improvements and bugfixes. Caching-related HTTP headers are now supported on summaries and...

Chinese Hackers Selling Intimate Stolen Camera Footage

Stolen videos captured by tens of thousands of security cameras at private properties throughout China are now for sale across social media, marketed as sex tapes. That’s according to the South China Morning Post, which reported that the cost of each “tape” varies, depending on how salacious the...

Camera Component GenerateFaceMask Privilege Escalation

The vulnerability of the GenerateFaceMask function in the Camera component of Android operating systems lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android Camera convertToHidl Unauthorized Access

The vulnerability in the implementation of the convertToHidl function of the Camera component in Android operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2019-20465

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

CVE-2019-20464

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...

CVE-2019-20466

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "default" account is capable of reading the /etc/passwd file, which contains a weakly hashed root password. By taking this hash and cracking it, the attacker can obtain root righ...

CVE-2019-20463

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner. For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for...