Cross site scripting

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...

CVE-2022-34539

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34539

CVE-2022-34539 affects Digital Watchdog DW MEGApix IP cameras (version A7.2.2_20211029). The flaw is in the /admin/curltest.cgi component and is exploitable via a crafted POST request, enabling command injection. Public documents corroborate a high-severity impact (CVSSv3.1: 8.8; Network vector, ...

CVE-2022-34540

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34540

CVE-2022-34540 affects Digital Watchdog DW MEGApix IP cameras (version A7.2.2_20211029). The vulnerable component is /admin/vca/license/license_tok.cgi, with a command-injection flaw exploitable via a crafted POST request. Affected product behavior and impact are described in multiple sources; PT...

CVE-2022-34538

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34538

CVE-2022-34538 affects Digital Watchdog DW MEGApix IP cameras (A7.2.2_20211029). A command-injection vulnerability exists in /admin/vca/bia/addacph.cgi and is exploitable via crafted POST requests. Several connected sources corroborate the issue and its impact, with no publicly documented patch d...

CVE-2022-34537

The CVE-2022-34537 entry concerns Digital Watchdog DW MEGApix IP cameras with firmware version A7.2.2_20211029, where a cross-site scripting (XSS) vulnerability exists in the bia_oneshot.cgi component. According to the provided data, the vulnerability is exploitable over network, has low privileg...

CVE-2022-34537

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...

CVE-2022-34536

CVE-2022-34536 affects Digital Watchdog DW MEGApix IP cameras, specifically version A7.2.2_20211029. The vulnerability allows an attacker to access the core log file and hijack sessions via a crafted session token, per multiple sources (NVD description). The root cause is unauthorized access thro...

CVE-2022-34536

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows attackers to access the core log file and perform session hijacking via a crafted session token...

CVE-2022-34535

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...

CVE-2022-34535

Affected product: Digital Watchdog DW MEGApix IP cameras (firmware A7.2.2_20211029). Issue: Unauthenticated access allows viewing internal paths and scripts via web files. Impact: Confidentiality impact described as high in CVSS, with no information on exploitation details from the provided sourc...

PT-2022-22198 · Digital Watchdog · Dw Megapix Ip Cameras

Name of the Vulnerable Software and Affected Versions: Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description: A command injection issue was found in the /admin/curltest.cgi component. This issue can be exploited through a crafted POST request. Recommendations: For version...

Multiple Dahua Products Denial of Service Vulnerabilities

Dahua IPC-HFW2XXX is a series of IP cameras, Dahua IPC-HDBW2XXX is a series of cameras, Dahua ASI7XXXX is a series of face recognition access controllers, and Dahua IPC-HFW2XXX is a series of IP cameras. A denial of service vulnerability exists in several Dahua products, which could be exploited ...

ZoneMinder Remote Code Execution Vulnerability

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A remote code execution vulnerability exists in versions prior to ZoneMinder 1.36.13, which can be exploited by attackers to cause arbitrary code execution...

ZoneMinder Competition Conditions Vulnerability

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A competing condition vulnerability exists in ZoneMinder 1.32.3 and prior versions, which can be exploited by remote attackers to access and modify records...

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57801)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and prior versions, which stems from the program not being properly filtered and could be exploited by remote...

Bosch IP cameras 安全漏洞

Bosch IP cameras is a German Bosch network camera A security vulnerability exists in Bosch IP cameras, which stems from specially crafted TCP/IP packets that cause the camera's Recover Image web interface to crash, and also results in a buffer overflow that enables remote code execution...

Bosch Video Security Code Injection Vulnerability

Bosch Video Security is a video security system from Bosch, Germany. Used to connect to Bosch Ip cameras and encoders from around the world, experience instant video playback, full access to your recordings, forensic search of cameras with Bosch video analytics support, and smooth control of Ptz...