CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

UBUNTU-CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26746 · Unknown · Camp Style Project Line

Name of the Vulnerable Software and Affected Versions: Camp Style Project Line version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Camp Style Project Line version 13.6.1, consider...

CVE-2023-39039: Exposure of Resource to Wrong Sphere

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Camp Style Project Line Security Breach

Camp Style Project Line is a camping store website by Camp, Inc. A security vulnerability exists in Camp Style Project Line version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain a channel access token and sen...

CVE-2023-39039

CVE-2023-39039 affects Camp Style Project Line v13.6.1, causing an information leak that allows an attacker to obtain the channel access token and send crafted messages. The initial documents consistently describe the vulnerability as an information disclosure issue in Camp Style Project Line v13...

campjellystone.com Cross Site Scripting vulnerability OBB-3645744

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

About the security content of macOS Ventura 13.1

About the security content of macOS Ventura 13.1 This document describes the security content of macOS Ventura 13.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of macOS Monterey 12.6.2

About the security content of macOS Monterey 12.6.2 This document describes the security content of macOS Monterey 12.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

chriscollinsbasketballcamp.com Cross Site Scripting vulnerability OBB-3079720

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

patrickfuller camp 安全漏洞

patrickfuller camp patrickfuller camp is a websocket-based Raspberry Pi webcam web server by the individual developer Patrick Fuller. A security vulnerability exists in patrickfuller camp commit number: bbd53a256ed70e79bd8758080936afbf6d738767, which stems from the fact that its...

CVE-2022-37109

CVE-2022-37109 affects the "camp" Raspberry Pi camera server up to commit bbd53a256ed70e79bd8758080936afbf6d738767. The root cause is Incorrect Access Control: password.txt is served from the StaticFileHandler root and the 403 bypass persists, allowing access to password.txt. Additionally, the pa...

CVE-2022-37109: Insufficiently Protected Credentials

patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt file is not properly restricted as it is in the root directory served by StaticFileHandler and the Tornado rule to throw a 403 error when...

[Security Nation] Jen and Tod on Hacker Summer Camp 2022

!\Security Nation\ Jen and Tod on Hacker Summer Camp 2022https://blog.rapid7.com/content/images/2022/08/securitynationlogo-1.jpg In this episode of Security Nation, Tod and Jen chat about their experience at this year’s Hacker Summer Camp, the multi-event lineup of cybersecurity conferences in La...

Black Hat and DEF CON Roundup

There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. The week even included a rare Las Vegas fla...

Threat Source newsletter (Aug. 4, 2022) — BlackHat 2022 preview

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter. After what seems like forever and honestly has been a really long time, we’re heading back to BlackHat in-person this year. We’re excited to see a lot of old friends again to commiserate, hang out, trade stories and...

The Forecast Is Flipped: Flipping L&D Enables Managers to Be Impact Multipliers

At Rapid7, we recognize that managers are at the heart of our mission and are central to optimizing the potential of our people. So naturally, focusing on the growth and development of our manager population became critical to productivity, engagement, retention, and creating strong teams, as wel...