41 matches found
Server side request forgery (ssrf)
A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans...
CVE-2018-7512
A cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...
Cross site scripting
A cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...
Improper access control
An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords...
CVE-2018-7516
A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans...
CVE-2018-7532
CVE-2018-7532 affects Geutebruck IP cameras: G-Cam/EFD-2250 v1.12.0.4 and Topline TopFD-2125 v3.15.1, with an unauthenticated remote code execution vulnerability due to improper authentication (CWE-287). The CVSS v3 base score is 9.8 (CRITICAL); vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indica...
CVE-2018-7524
Geutebruck IP cameras G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2018-7524). The issue may allow an unauthenticated or unauthorized user to be added to the system. The NVD/NIST entry documents ...
CVE-2018-7512
CVE-2018-7512 affects Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1). A Cross-Site Scripting vulnerability may allow remote code execution via the device web interface. The public docs describe XSS as part of multiple vulnerabilities, with a CVSS v3 base sc...
CVE-2018-7528
The CVE-2018-7528 entry documents an SQL injection vulnerability in Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) IP cameras, allowing an attacker to alter stored data. Root cause: improper handling of SQL commands in the affected components, enabling a re...
CVE-2018-7528
An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data...
CVE-2018-7532
Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...
CVE-2018-7524
A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an unauthorized user to be added to the system...
CVE-2018-7512
A cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...
CVE-2018-7520
An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords...
CVE-2018-7520
Geutebruck CVE-2018-7520 affects G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (3.15.1). The root cause is improper access control, enabling full configuration download (including passwords) and, per public advisories and exploit records, remote command execution via the /uapi-cgi/vie...
Geutebruck IP Cameras Cross-Site Request Forgery Vulnerability
The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A cross-site request forgery vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to add unauthorized users to the system...
Geutebruck IP Cameras SQL Injection Vulnerability
The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A SQL injection vulnerability exists in Geutebruck IP Cameras, which allows attackers to exploit the vulnerability to alter stored data...
topline-nautisme.com XSS vulnerability
Open Bug Bounty ID: OBB-527160 Description| Value ---|--- Affected Website:| topline-nautisme.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2015-1608
Topline Opportunity Form aka XLS Opp form before 2015-02-15 does not properly restrict access to database-connection strings, which allows attackers to read the cleartext version of sensitive credential and e-mail address information via unspecified vectors...
CVE-2015-1608
CVE-2015-1608 affects the Topline Opportunity Form (XLS Opp form). The underlying issue is improper access restriction to database-connection strings, allowing an attacker to read cleartext credentials and email addresses via unspecified vectors. Connected sources corroborate the same description...