PT-2020-4376 · Microsoft · Windows Camera Codec Pack +1

Name of the Vulnerable Software and Affected Versions: Windows Camera Codec Pack affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by the Windows Camera Codec Pack. This could allow an attacker to run arbitrary code in...

KB4580327: Windows 10 October 2020 Security Update

The remote Windows host is missing security update 4580327. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

PT-2020-10885

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A critical issue in Android could allow attackers to gain control of a victim's camera, enabling them to take photos, record videos, and access location information. Recommendations At the...

Sony IPELA Network Camera 1.82.01 - (ftpclient.cgi) Remote Stack Buffer Overflow Exploit

Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow Google Dork: Server: Mida eFramework Exploit Author: LiquidWorm Vendor Homepage: https://pro.sony Version: = 1.82.01 !/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote Stack Buffer...

Sony IPELA Network Camera Remote Stack Buffer Overflow

!/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote Stack Buffer Overflow Vendor: Sony Electronics Inc. Product web page: https://pro.sony Affected version: SNC-DH120T v1.82.01 Summary: IPELA is Sony's vision of the ultimate workplace, designed to revolutionize the way business...

Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow

Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow Google Dork: Server: Mida eFramework Date: 2020-09-30 Exploit Author: LiquidWorm Vendor Homepage: https://pro.sony Version: = 1.82.01 !/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote...

Ring's Flying In-Home Camera Drone Escalates Privacy Worries

Ring’s newly announced robot drone – a connected device that flies around homes taking security footage – is causing privacy experts’ concerns to take off. Amazon on Thursday unveiled the Always Home Cam as part of its Ring division, which will cost $249.99 and starts shipping next year. The...

In the Linux kernel before 5.6.1 drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors aka CID-a246b4d54770.

...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

Design/Logic Flaw

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25747

CVE-2020-25747 affects Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware v342, v339). The Telnet service allows remote unauthenticated access to RTSP and ONFIV services, enabling an attacker to view live streams, rotate the camera, modify settings (brightness, clarity, time), restart the de...

Verint PTZ Camera Command Injection (CVE-2020-24057)

A command execution vulnerability exists in Verint PTZ Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands as root on the affected system...

Camera Codec Pack Windows Code Execution

The vulnerability of the Camera Codec Pack component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists as the WebRTC component in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context...

Verint PTZ Camera Stack Overflow

A buffer overflow vulnerability exists in Verint PTZ Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2020-0328

In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131...

Integer overflow

In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131...

CVE-2020-0328

In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131...

CVE-2020-0328

CVE-2020-0328 affects Android 11, with a vulnerability in the camera component where an integer overflow can trigger an out-of-bounds read. This may lead to local information disclosure and system-level execution privileges, without user interaction. The issue is documented across multiple source...