CVE-2013-1604

Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to read arbitrary files via a .. dot dot in the default URI...

Directory traversal

Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to read arbitrary files via a .. dot dot in the default URI...

Buffer overflow

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

CVE-2013-1605

CVE-2013-1605 affects MayGion IP Cameras running firmware v09.27 and earlier; a remote attacker can trigger a buffer overflow via a GET request with a long filename, potentially executing arbitrary code. CoreLabs advisories (CORE-2013-0322) describe the vulnerability and provide PoC-like snippets...

CVE-2013-1604

Affected product: MayGion IP Cameras with firmware 2011.27.09 or v09.27 and earlier. Vulnerabilities: CVE-2013-1604 (path traversal) allows an unauthenticated remote attacker to dump memory and extract credentials; CVE-2013-1605 (buffer overflow) enables code execution. CoreLabs advisory CORE-201...

CVE-2013-1604

Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to read arbitrary files via a .. dot dot in the default URI...

CVE-2013-1605

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

PT-2014-2482

Name of the Vulnerable Software and Affected Versions MayGion IP Cameras versions prior to 2013.04.22 05.53 Description A directory traversal issue allows remote attackers to read arbitrary files by using a .. dot dot in the default URI. Recommendations For versions prior to 2013.04.22 05.53,...

CVE-2013-1604: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to read arbitrary files via a .. dot dot in the default URI...

PT-2014-2483

Name of the Vulnerable Software and Affected Versions MayGion IP Cameras versions prior to 2013.04.22 05.53 Description The issue allows remote attackers to execute arbitrary code via a long filename in a GET request to a vulnerable API endpoint, such as "/api/v1/download" or similar, by exploiti...

CVE-2013-1605: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950...

Conceptronic IP cameras CSRF

Web interface crossite request forgery...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID...

CVE-2013-5215

CVE-2013-5215 is an XSS vulnerability in the web UI of FOSCAM Wireless IP Cameras, specifically the  WiFi scan option. The issue allows remote attackers to inject arbitrary web script or HTML via the SSID field. The public data notes a base CVSS2 score of 4.3 (Medium) with Network attack vector ...

CVE-2013-5215

Cross-site scripting XSS vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID...

CVE-2013-5215: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID...

PT-2013-5448

Name of the Vulnerable Software and Affected Versions FOSCAM Wireless IP Cameras affected versions not specified Description A cross-site scripting XSS issue exists in the web interface of FOSCAM Wireless IP Cameras, specifically in the "WiFi scan" option. This allows remote attackers to inject...

Vivotek IP cameras authentication bypass

RTSP access authentication bypass...

CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Vivotek IP Cameras RTSP Authentication Bypass 1. Advisory Information Title: Vivotek IP Cameras RTSP Authentication Bypass Advisory ID: CORE-2013-0704 Advisory URL:...