CVE-2023-51820

An issue in Blurams Lumi Security Camera A31C v.2.3.38.12558 allows a physically proximate attackers to execute arbitrary code...

CVE-2023-50488

An issue in Blurams Lumi Security Camera A31C v23.0406.435.4120 allows attackers to execute arbitrary code...

Code injection

An issue in Blurams Lumi Security Camera A31C v.2.3.38.12558 allows a physically proximate attackers to execute arbitrary code...

Code injection

An issue in Blurams Lumi Security Camera A31C v23.0406.435.4120 allows attackers to execute arbitrary code...

CVE-2023-51820

An issue in Blurams Lumi Security Camera A31C v.2.3.38.12558 allows a physically proximate attackers to execute arbitrary code...

CVE-2023-51820

CVE-2023-51820 affects Blurams Lumi Security Camera (A31C) v2.3.38.12558. Reports concur that a physically proximate attacker can execute arbitrary code. The available sources do not disclose the exact root cause or vulnerable function/file, and exploitation is described as possible in the vicini...

CVE-2023-50488

An issue in Blurams Lumi Security Camera A31C v23.0406.435.4120 allows attackers to execute arbitrary code...

CVE-2023-50488

CVE-2023-50488 affects the Blurams Lumi Security Camera (A31C) in version 23.0406.435.4120 , enabling remote arbitrary code execution. The provided sources state a high-severity, network-exposed vulnerability with low exploit complexity and no user interaction. The exact root cause is not detaile...

CVE-2023-50488

An issue in Blurams Lumi Security Camera A31C v23.0406.435.4120 allows attackers to execute arbitrary code...

PT-2024-13943 · Blurams · Blurams Lumi Security Camera

Name of the Vulnerable Software and Affected Versions: Blurams Lumi Security Camera A31C version 23.0406.435.4120 Description: An issue in the Blurams Lumi Security Camera allows attackers to execute arbitrary code. Recommendations: For version 23.0406.435.4120, update to a newer version that...

PT-2024-14305 · Blurams · Blurams Lumi Security Camera

Name of the Vulnerable Software and Affected Versions: Blurams Lumi Security Camera A31C version 2.3.38.12558 Description: An issue in the Blurams Lumi Security Camera allows a physically proximate attacker to execute arbitrary code. Recommendations: For version 2.3.38.12558, at the moment, there...

Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers

In what's an ingenious side-channel attack, a group of academics has found that it's possible to recover secret keys from a device by analyzing video footage of its power LED. "Cryptographic computations performed by the CPU change the power consumption of the device which affects the brightness ...

ABUS Security Camera TVIP 20000-21150 - LFI_ RCE and SSH Root Access

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Exploit Title: ABUS Security Camera TVIP 20000-21150 - LFI, RCE and SSH Root Access Date: 2023-02-16 Exploit Author: [email protected] for NetworkSEC NWSSA-001-2023 Vendor Homepage: https://www.abus.com Version/Model: TVIP...

Threat Source newsletter (March 30, 2023) — It’s impossible to tell if your home security camera or doorbell is truly safe

Welcome to this weeks edition of the Threat Source newsletter. Everyone loves a good video of someone slipping on their icy steps in the winter, captured thanks to their home security camera or smart doorbell. But what about when that camera is just kind of chilling out and not catching the momen...

ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution Vulnerability

ABUS Security Camera version TVIP 20000-21150 suffers from local file inclusion, hardcoded credential, and command injection vulnerabilities. When coupled together, they can be leveraged to achieve remote access as root via ssh...

ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Exploit Title: ABUS Security Camera LFI, RCE and SSH Root Access Date: 2023-02-16 Exploit Author: [email protected] for NetworkSEC NWSSA-001-2023 Vendor Homepage: https://www.abus.com Version/Model: TVIP 20000-21150 probabl...

What to Look for When Buying a Security Camera (2023): Tips and Risks

Eufy's recent scandal shows it's not so much about the data breach but about how a company responds. Here are a few ways to shop smart...

RedTeam-Physical-Tools - Red Team Toolkit - A Curated List Of Tools That Are Commonly Used In The Field For Physical Security, Red Teaming, And Tactical Covert Entry

Commonly used tools for Red Teaming Engagements, Physical Security Assessments, and Tactical Covert Entry. In this list I decided to share most of the tools I utilize in authorized engagements, along with my personal ranking of their value based on their usage and for you to consider if they shou...

New BotenaGo Malware Variant Targeting Lilin Security Camera DVR Devices

A new variant of an IoT botnet called BotenaGo has emerged in the wild, specifically singling out Lilin security camera DVR devices to infect them with Mirai malware. Dubbed "Lilin Scanner" by Nozomi Networks, the latest version is designed to exploit a two-year-old critical command injection...

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-37377)

Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W version v3.0.0.13620121102 contains a security vulnerability that can be exploited by attackers to cause a reboot via a compiled HTTP request...