Axis Camera Station Deserialization Arbitrary Code

The vulnerability of the surveillance and recording server systems for AXIS Camera Station and Camera Station Pro, as well as the AXIS Device Manager software for device management, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor...

Dahua DSS Professional Packet Handler Arbitrary File Load

The vulnerability of the packet handler in the centralized video surveillance equipment management system of Dahua DSS Professional and DSS Express, as well as the DHI-DSS4004-S2/DHI-DSS7016D-S2/DHI-DSS7016DR-S2 video surveillance management servers, is related to the ability to load unlimited...