D-Link IP cameras information leakage

It's possible to retrieve camera password...

CVE-2012-3002

The web interface on 1 Foscam and 2 Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL...

CVE-2012-3002

CVE-2012-3002 describes an authentication bypass in the web interface of (Foscam and Wansview) IP cameras. An unauthenticated attacker can bypass login and perform administrative actions or read the admin password by requesting a direct, but unspecified, URL. Connected sources corroborate a high-...

CVE-2012-3002

The web interface on 1 Foscam and 2 Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL...

PT-2012-4426

Name of the Vulnerable Software and Affected Versions Foscam IP cameras affected versions not specified Wansview IP cameras affected versions not specified Description The issue allows remote attackers to bypass authentication on the web interface of the affected IP cameras. This enables them to...

CVE-2012-3002: Improper Authentication

The web interface on 1 Foscam and 2 Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL...

Password Disclosure in D-Link IP Cameras (CVE-2012-4046)

A password disclosure vulnerability in the D-Link DCS-9xx series IP cameras allows attackers to gain administrator level access to the camera when on the same broadcast domain. CVE-2012-4046 Details:...

airVisionNVR 1.1.13 - readfile() Disclosure SQL Injection

airVisionNVR 1.1.13 - readfile Disclosure SQL Injection Exploit Title: airVisionNVR readfile disclosure and sql injection Google Dork: Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link:...

airVisionNVR 1.1.13 readfile() Disclosure and SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: airVisionNVR readfile disclosure and sql injection Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link: http://www.ubnt.com/downloads/airvision/airVision-v1.1.3-installer.exe Version:...

rtsp-url-brute NSE Script

Attempts to enumerate RTSP media URLS by testing for common paths on devices such as surveillance IP cameras. The script attempts to discover valid RTSP URLs by sending a DESCRIBE request for each URL in the dictionary. It then parses the response, based on which it determines whether the URL is...

Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Abus IP cameras multiple security vulnerabilities

Read/write files access and command execution...

Multiple IP Cameras Remote Command Execution

Multiple vulnerabilities in several IP camera products ====================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities in several IP camera products Release date: 08/06/2011 Last update: 08/06/2011 Credits: Roberto Paleari, Emaze Networks S.p.A...

CVE-2010-4232

The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // slash slash at the beginning of a URI, as demonstrated by the //system.html URI...

CVE-2010-4231

Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Code injection

The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service device reboot via a large number of requests in a short time interval...

Directory traversal

Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2010-4234

The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service device reboot via a large number of requests in a short time interval...

Default Password (merlin) for 'mg3500' Account

The account 'mg3500' on the remote host has the password 'merlin'. An attacker may leverage this issue to gain access to the affected system. Note that some Camtron IP cameras are reported to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "mg3500"...

Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products Advisory ID: cisco-sa-20090624-video Revision 1.0 For Public Release 2009 June 24 1600 UTC GMT +--------------------------------------------------------------------- Summary...