681 matches found
FOSCAM IP-Cameras Improper Access Restrictions
Advisory ID Internal CORE-2013-0613 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:http://www.coresecurity.com/advisories/foscam-ip-cameras-improper-access-restrictions Date published: 2013-07-23 Date of last update:...
[CVE-REQUEST] Multiple CSRF vulnerabilities on Foscam IP cameras web UI
Embedded Web interface version 2.4.10.3 and older of Foscam FI8910W, FI8908W and many others is vulnerable to CSRF attacks. This allows attacker to perform calls to any CGI API using cached basic server authentication data stored in victims browser. Details: For example, the following URL request...
Foscam Cross Site Request Forgery
Embedded Web interface version 2.4.10.3 and older of Foscam FI8910W, FI8908W and many others is vulnerable to CSRF attacks. This allows attacker to perform calls to any CGI API using cached basic server authentication data stored in victims browser. Details: For example, the following URL request...
Foscam IP (Multiple Cameras) - Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/58943/info Multiple Foscam IP Cameras are prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks. The following products a...
Foscam IP (Multiple Cameras) - Multiple Cross-Site Request Forgery Vulnerabilities
Foscam IP Multiple Cameras - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/58943/info Multiple Foscam IP Cameras are prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain...
Foscam 11.37.2.x < 11.37.2.49 Directory Traversal
The version of the Foscam IP Camera firmware 11.37.2.x 11.37.2.49 on the remote host has a directory traversal vulnerability. A remote attacker could exploit this to access the entire filesystem and wifi credentials, for example, with a specially crafted request to retrieve the host's /proc/kcore...
Foscam Detection
The remote host is a Foscam IP Camera with an embedded web server. Note that Foscam cameras can be re-branded and re-sold by other vendors. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65669; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22";...
CVE-2013-2560
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...
Directory traversal
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...
CVE-2013-2560
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...
CVE-2013-2560
CVE-2013-2560 affects Foscam IP camera firmware before 11.37.2.49. The issue is a directory traversal in the web interface that allows remote attackers to read arbitrary files by using a .. in the URI, potentially exposing web and Wi‑Fi credentials (and possibly the full filesystem). Exploitation...
CVE-2013-2560: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...
Foscam < 11.37.2.49 Directory Traversal Vulnerability
Foscam is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
[CVE-REQUEST] Foscam <= 11.37.2.48 path traversal vulnerability
CVE-REQUEST Foscam = 11.37.2.48 path traversal vulnerability Summary: Foscam firmware = 11.37.2.48 is prone to a path traversal vulnerability in the embedded web interface. The unauthenticated attacker can access to the entire filesystem and steal web & wifi credentials. Details: GET...
Foscam Firmware 11.37.2.48 Path Traversal
CVE-REQUEST Foscam = 11.37.2.48 path traversal vulnerability Summary: Foscam firmware = 11.37.2.48 is prone to a path traversal vulnerability in the embedded web interface. The unauthenticated attacker can access to the entire filesystem and steal web & wifi credentials. Details: GET...
Foscam < 11.37.2.49 - Directory Traversal
source: https://www.securityfocus.com/bid/58290/info Foscam is prone to a directory-traversal vulnerability. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in the context of the application. This may aid in further attacks...
Foscam 11.37.2.49 - Directory Traversal
Foscam 11.37.2.49 - Directory Traversal source: https://www.securityfocus.com/bid/58290/info Foscam is prone to a directory-traversal vulnerability. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in the context of the...
CVE-2012-3002
The web interface on 1 Foscam and 2 Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL...
CVE-2012-3002
The web interface on 1 Foscam and 2 Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL...
CVE-2012-3002: Improper Authentication
The web interface on 1 Foscam and 2 Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL...