Google Nexus NVIDIA GPU driver elevation of privilege vulnerability (CNVD-2017-00472)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet developed by Google and the Open Handset Alliance OHA, and the NVIDIA camera driver is one of the camera drivers used in it. An elevation of privilege vulnerability exists in the NVIDIA GPU driver on Google...

PT-2017-1211

Name of the Vulnerable Software and Affected Versions MediaTek driver versions affected versions not specified Description The issue is related to insufficient access control in the MT6573FDVT SetRegHW function of the camera fdvt.c driver for the MediaTek application in the Android operating...

Security Advisory - Camera DOS Vulnerability in ION Memory Management Module of Huawei Smart Phone

A denial of service DoS vulnerability exists in the ION memory management module of some Huawei mobile phones. An attacker may trick a user into installing a malicious app to send specific parameters to a Huawei mobile phone. Successful exploit could cause the system to restart. Vulnerability ID:...

Google Nexus Qualcomm Camera Driver elevation of privilege vulnerability (CNVD-2017-00174)

Google Nexus is a smart device from the American company Google Google. Google Nexus suffers from elevation of privilege vulnerabilities. These vulnerabilities can be exploited by an attacker to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus Qualcomm Camera Driver elevation of privilege vulnerability (CNVD-2017-00173)

Google Nexus is a smart device from the American company Google Google. Google Nexus suffers from elevation of privilege vulnerabilities. These vulnerabilities can be exploited by an attacker to execute arbitrary code with elevated privileges in the context of the kernel...

FTC: D-Link Failed to Secure Routers, IP Cameras

The Federal Trade Commission acknowledged on Thursday that it takes the security of the so-called internet of things seriously when it leveraged a complaint against one of the more popular router manufacturers. The lawsuit, filed at the U.S. District Court for the Northern District of California,...

BAVision IP Camera Web Server Login

This module will attempt to authenticate to an IP camera created by BAVision via the web service. By default, the vendor ships a default credential admin:123456 to its cameras, and the web server does not enforce lockouts in case of a bruteforce attack. This module requires Metasploit:...

Samsung DVR Design Vulnerability

Samsung DVRs are small PCs used to record TV broadcasts, cable or DirectTV transmissions. Samsung DVR design vulnerability. Since the Samsung DVR web browser defaults to using HTTP port 80 to transmit base64-encoded credentials in the cookie header and base64-encodes only the login and password. ...

Memory Corruption Vulnerability in Pomelo Camera's Handling of BMP Files

Pomelo Camera POMELO is a mobile photography + photo beautification APP from Meitu Xiu Xiu. A memory corruption vulnerability exists in Pomelo Camera's handling of BMP files. An attacker can exploit the vulnerability to crash the program by constructing a malformed BMP image. Successful...

Flash Player Bug An Eavesdropper's Delight

Adobe yesterday patched a not-so-sweet 16 Flash Player vulnerabilities, including a zero day under attack. While not much is known about the targeted attacks using the Flash Player bug, or its victims, details have surfaced on another patched flaw that is a potential privacy nightmare...

Google Android NVIDIA Camera Driver Denial of Service Vulnerability

Android on Pixel C is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for the Pixel C. The NVIDIA Camera Driver is one of the camera drivers used. A denial of service vulnerability exists in the NVIDIA Camera Driver in Android on Pixel C...

Sony IPELA Engine IP Camera Detection (HTTP)

HTTP based detection of Sony IPELA Engine IP Cameras. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Google Nexus Qualcomm Camera Driver elevation of privilege vulnerability (CNVD-2016-12174)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Camera Driver is a camera driver developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm Camera Driver for Android. The vulnerability ca...

WNC01WH vulnerable to directory traversal due to an issue in processing POST request

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a directory traversal vulnerability due to an issue in processing POST request. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

WNC01WH vulnerable to directory traversal due to an issue in processing commands

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a directory traversal vulnerability due to an issue in processing commands. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer und...

WNC01WH vulnerable to enabling debug option

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains an enabling debug option vulnerability. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

WNC01WH vulnerable to stored cross-site scripting

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a stored cross-site scripting vulnerability. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

WNC01WH vulnerable to cross-site request forgery

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a cross-site request forgery vulnerability. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

CVE-2016-6741

An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Androi...

CVE-2016-6740

An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Androi...