PT-2023-16639 · Sensormatic Electronics · Sensormatic Electronics Illustra Pro Gen 4 Dome/Ptz Cameras

Name of the Vulnerable Software and Affected Versions: Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras affected versions not specified Description: A debug feature in the cameras allows a user to compromise credentials after a long period of sustained attack. Recommendations: At t...

Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6067 Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-9058

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection...

Code injection

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection...

CVE-2020-9058

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection...

Weak password vulnerability in DH-SD6C82E-GN of Zhejiang Dahua Technology Co.

The DH-SD6C82E-GN is an HD network dome camera. DH-SD6C82E-GN of Zhejiang Dahua Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 233D Network Dome Camera

The 233D is a webcam. An unauthorized access vulnerability exists in Axis 233D Network Dome Camera, which can be exploited by attackers to obtain sensitive information...

Design/Logic Flaw

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as t...

CVE-2020-11625

CVE-2020-11625 affects AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. The issue arises from ISAPI/Security/sessionLogin/capabilities responses that reveal whether a submitted username exists: a valid username r...

CVE-2020-11624

Technical details about CVE-2020-11624 are not publicly provided in the supplied documents. Monitor for updates and advisories for AvertX cameras (HD838/HD438) to obtain concrete impact and remediation information.

CVE-2020-11623

Technical details such as affected products/versions, root cause, and remediation are not publicly disclosed in the provided connected documents. Monitor for updates from vendors and security bulletins to obtain concrete details and fixes.

PT-2020-12735 · Avertx · Avertx Auto Focus Night Vision Hd Indoor/Outdoor Ip Dome Camera Hd838 +1

Name of the Vulnerable Software and Affected Versions: AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 AvertX Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438 Description: The issue allows attackers to identify legitimate usernames through different responses to...

CVE-2019-12042

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event as an encrypted JSON string to the system service AgentSvc.exe, which leads to privilege...

Comodo Dome Firewall 2.7.0 Cross Site Scripting

Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Date: 18.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link: https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278 Version: 2.7.0 Introduction Comodo Dom...

Comodo Dome Firewall 2.7.0 - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link:...

Comodo Dome Firewall 2.7.0 - Cross-Site Scripting

Comodo Dome Firewall 2.7.0 - Cross-Site Scripting Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Date: 18.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link:...

Comodo Dome Firewall 2.7.0 - Cross-Site Scripting

Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Date: 18.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link: https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278 Version: 2.7.0 Introduction Comodo Dom...

dome-store.pt XSS vulnerability

Open Bug Bounty ID: OBB-689624 Description| Value ---|--- Affected Website:| dome-store.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

sapporo-dome.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-667447 Description| Value ---|--- Affected Website:| sapporo-dome.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...