CVE-2014-1849

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...

Code injection

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...

CVE-2014-1849

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam...

CVE-2014-1849

CVE-2014-1849 affects Foscam IP cameras (e.g., 11.37.2.49 and other versions) where the DynDNS option generates credentials from predictable camera subdomain names, enabling remote attackers to spoof or hijack cameras and modify camera records on the Foscam DNS server. Impact per NVD indicates co...

Foscam IP Camera - Predictable Credentials Security Bypass

Foscam IP Camera - Predictable Credentials Security Bypass // source: https://www.securityfocus.com/bid/67510/info Foscam IP Camera is prone to a security-bypass vulnerability. An attacker can exploit this issue to gain access to sensitive information and perform certain unauthorized actions; thi...

Foscam IP Camera - Predictable Credentials Security Bypass

// source: https://www.securityfocus.com/bid/67510/info Foscam IP Camera is prone to a security-bypass vulnerability. An attacker can exploit this issue to gain access to sensitive information and perform certain unauthorized actions; this may lead to further attacks. Foscam IP Camera 11.37.2.49...

Zavio IP Camera Firmware 1.6.03 User Code Execution - Ver2 (CVE-2013-2568)

A code execution vulnerability has been reported in Zavio IP Camera Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system and gain the credentials of registered users...

Zavio IP Camera Firmware 1.6.03 Authentication Bypass - Ver2 (CVE-2013-2567)

An authentication bypass vulnerability has been reported in the Zavio IP Camera firmware. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Buffer overflow

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...

CVE-2013-4977

CVE-2013-4977 is a confirmed buffer overflow in the RTSP Packet Handler of Hikvision DS-2CD7153-E (firmware 4.1.0 b130111, Jan 2013) that allows remote attackers to crash the device and potentially execute code via a crafted Range header in RTSP. Public sources describe the vulnerability as affec...

Foscam IP camera authentication bypass vulnerability

Overview The FI8910W Foscam IP camera running firmware version 11.37.2.54 fails to properly authenticate users. Description CWE-592: Authentication Bypass Issues - CVE-2014-1911The FI8910W Foscam IP camera running firmware version 11.37.2.54 contains a vulnerability which allows an unauthenticate...

Stem Innovation IZON Hardcoded Password Vulnerability

Stem Innovation's IZON IP camera has hard-coded passwords that can be leveraged via both telnetd and httpd. Stem Innovation ‘IZON’ Hard-coded Credentials CVE-2013-6236 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- Stem Innovation's IP camera called ‘IZON’...

CVE-2013-5215

Cross-site scripting XSS vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID...

FOSCAM Wireless IP Camera Cross Site Scripting

Advisory: FOSCAM Wireless IP Camera - SSID XSS Author: Liad Mizrachi Vendor URL: http://www.foscam.com/ Vulnerability Status: No Fix CVE-ID: CVE-2013-5215 ========================== Vulnerability Description ========================== FOSCAM's Web UI "WiFi scan" option is vulnerable to XSS using ...

Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236)

Stem Innovation ‘IZON’ Hard-coded Credentials CVE-2013-6236 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Stem Innovation's IP camera called ‘IZON’ utilizes numerous hard-coded credentials within its Linux distribution and also the hidden web...

Stem Innovation - 'IZON' Hard-Coded Credentials

Stem Innovation ‘IZON’ Hard-coded Credentials CVE-2013-6236 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Stem Innovation's IP camera called ‘IZON’ utilizes numerous hard-coded credentials within its Linux distribution and also the hidden web...

Cisco Video Surveillance 4000 Series IP Camera Default Credential Vulnerability

A vulnerability in the analytics page of the Cisco Video Surveillance 4000 Series IP Camera could allow an unauthenticated, remote attacker to gain access to the analytics pages of a Cisco Video Surveillance 4000 Series IP Camera. The vulnerability is due to an undocumented user account with a...

Security Guard CMS QT 4.7.3 - Stack Overflow Vulnerability

Document Title: =============== Security Guard CMS QT 4.7.3 - Stack Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1085 Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID: ====================================...

TP-Link IP Camera Hardcoded Credentials / Command Injection

TP-Link IP cameras suffer from hard-coded credential and remote command execution vulnerabilities. TP-Link IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: TP-Link IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0318 Advisory URL:...

Zavio IP Camera Command Injection / Bypass Vulnerabilities

Zavio IP cameras based on firmware versions 1.6.03 and below suffer from bypass, hard-coded credential, and arbitrary command execution vulnerabilities. Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302...