CVE-2022-21177

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from...

Yokogawa CENTUM Improper Limitation of a Pathname to a Restricted Directory (CVE-2020-5609)

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a intruder to cause service failures or modify the log files on the server.

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, stems from improper processing of output data for registration logs. Exploiting this...

chat-sex-cams.com Cross Site Scripting vulnerability OBB-1414011

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

cams-web.nl Cross Site Scripting vulnerability OBB-1371856

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-5609

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...

CVE-2020-5609

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...

Directory traversal

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...

Authentication flaw

CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered...

CVE-2020-5608

CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered...

CVE-2020-5608

CVE-2020-5608 affects Yokogawa CAMS for HIS CENTUM CS 3000 (including CENTUM CS 3000 Small) R3.08.10–R3.09.50, CENTUM VP (including CENTUM VP Small/Basic) R4.01.00–R6.07.00, B/M9000CS R5.04.01–R5.05.01, and B/M9000 VP R6.01.01–R8.03.01. The vulnerability is an improper authentication (CWE-287) ri...

CVE-2020-5609

CVE-2020-5609 is a directory traversal vulnerability affecting Yokogawa CAMS for HIS CENTUM CS 3000 (incl. CENTUM CS 3000 Small, R3.08.10–R3.09.50), CENTUM VP (incl. CENTUM VP Small/Basic, R4.01.00–R6.07.00), B/M9000CS (R5.04.01–R5.05.01), and B/M9000 VP (R6.01.01–R8.03.01). The issue allows a re...

CVE-2020-5609

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...

Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack

A popular consumer-grade security camera made by TP-Link and sold under the Kasa brand has bevy of bugs that open the hardware to remote attacks, such as giving hackers access to private video feeds and the ability to change device settings. The researcher Jason Kent, with Cequence Security,...

California Passes Bill to Ban Police Use of Facial Recognition

The California Senate has passed a bill in a 22-15 vote that would ban the use by law enforcement of body cams that use facial recognition. The move will send AB 1215, already passed by the California Assembly back in May on a 45-17 vote, to the desk of Gov. Gavin Newsom to be signed into law. Th...

A week in security (June 17 – 23)

Last week on the Malwarebytes Labs blog, we took a look at the growing pains of smart cities, took a deep dive into AI, jammed along to Radiohead, and looked at the lessons learned from Chernobyl in relation to critical infrastructure. We also explored a new Steam phish attack, and pulled apart a...

cb-cams.com Cross Site Scripting vulnerability

Security Researcher rcdxmlt Helped patch 64 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting cb-cams.com website and its users. Following coordinated and responsible vulnerability...

banners.cams.com XSS vulnerability

Vulnerable URL: http://banners.cams.com/p/banners/go.cgi?page=367〈=english%20src=x+onerror%3Dprompt%28page=bannersmobile=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS...

tour.indianhiddencams.com XSS vulnerability

Vulnerable URL: http://tour.indianhiddencams.com/highprofilemumbaiescortinhotel.html?nats="2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

SunellSecurity NVR Camera - Denial of Service

SunellSecurity NVR Camera - Denial of Service Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web service buff...