CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

CVE-2019-18382

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

Open redirect

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

CVE-2019-18382

AVStar PE204 3.10.70 IP cameras are affected by CVE-2019-18382. A denial of service can occur on open TCP port 23456, triggered after a TELNET connection, resulting in all TCP ports becoming closed. Connected sources (Red Hat, CVE listings, NVD) reiterate the same description. No remediation or e...

CVE-2019-18382

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery

Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery Author: LiquidWorm Discovery Date: 2019-09-26 Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested on: GoAhead-Webs Advisory ID: ZSL-2019-5536 Advisory URL:...

CVE-2019-14458

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...

Design/Logic Flaw

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...

CVE-2019-14458

CVE-2019-14458 affects VIVOTEK IP Camera devices with firmware before 0x20x. The vulnerability allows a denial-of-service triggered by a crafted HTTP header. Exploit details, affected models/versions beyond the firmware threshold, and concrete remediation are not provided in the connected documen...

CVE-2019-14458

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...

CVE-2019-14457

VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header...

Stack overflow

VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header...

CVE-2019-14457

Vulnerability CVE-2019-14457 affects VIVOTEK IP Camera devices running firmware prior to 0x20x. The flaw is a stack-based buffer overflow triggered by a crafted HTTP header, potentially allowing arbitrary code execution. NVD metrics show a high/critical impact with network access and no user inte...

CVE-2019-14457

VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header...

Dahua Amcrest IP Camera Information Disclosure (CVE-2019-3948)

An information disclosure vulnerability exists in Amcrest IP camera. An unauthenticated, remote attacker can connect to this endpoint and listen to the audio the camera is capturing...

Amcrest Technologies IP Camera Unauthenticated Remote Audio Streaming Vulnerability

The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

CVE-2019-3948

CVE-2019-3948 impacts Amcrest IP2M-841B and several Dahua cameras/NVRs that expose HTTP endpoint /videotalk without authentication. An unauthenticated remote attacker can connect to this endpoint and potentially listen to device audio. Public documentation across multiple sources confirms the iss...

Geutebruck IP Camera GCam Efd2250 Remote Code Execution (CVE-2017-5173; CVE-2017-5174)

A remote code execution vulnerability exists in Geutebruck IP Camera GCam Efd2250 Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-13719

The Amcrest IPM-721S AmcrestIPC-AWXXEngNV2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encod...

Stack overflow

The Amcrest IPM-721S AmcrestIPC-AWXXEngNV2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encod...