LG Innotek LNV5110R 安全漏洞

LG Innotek LNV5110R is a webcam from LG Innotek, a South Korean company. A security vulnerability exists in the LG Innotek LNV5110R that stems from an authentication vulnerability that could lead to remote code execution...

The vulnerability of the video transmission application Canon EOS Webcam Utility Pro on macOS operating systems arises from the incorrect assignment of permissions to the critical resource. This allows attackers to execute arbitrary code and increase their privileges.

The vulnerability of the video transmission application Canon EOS Webcam Utility Pro on macOS systems is related to the incorrect assignment of permissions for the critical resource. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

CVE-2025-5995

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...

Trend Makers Sight Bulb Pro 命令注入漏洞

Trend Makers Sight Bulb Pro is a webcam from Trend Makers, USA. The Trend Makers Sight Bulb Pro suffers from a command injection vulnerability that stems from a vulnerability in the TCP protocol on port 16668, which could result in an unauthenticated user executing arbitrary commands...

CVE-2025-5995

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...

CVE-2025-5995

CVE-2025-5995 affects Canon EOS Webcam Utility Pro for macOS, with versions 2.3d (2.3.29) and earlier vulnerable due to improper directory permissions. An attacker with administrator privileges could modify the target directory, potentially enabling code execution and privilege escalation. Mitiga...

CVE-2025-5995 Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...

CVE-2025-5995 Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...

Canon EOS Webcam Utility Pro for MAC OS 安全漏洞

Canon EOS Webcam Utility Pro for MAC OS is a software designed for Canon cameras by Canon Japan that allows users to use a compatible Canon camera as a webcam. A security vulnerability exists in Canon EOS Webcam Utility Pro for MAC OS version 2.3d, which stems from improper directory permissions...

PT-2025-27009 · Canon · Canon Eos Webcam Utility Pro

Name of the Vulnerable Software and Affected Versions: Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier Description: The issue is related to improper directory permissions, which can be exploited by a malicious user with administrator access. This could potentially lead to...

PT-2025-26931 · WordPress · Webcam

Name of the Vulnerable Software and Affected Versions: web-cam plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Stored Cross-Site Scripting via the slug parameter due to insufficient input sanitization and output escaping. This allows authenticated...

Sony SNC-M1 安全漏洞

Sony SNC-M1 is a webcam from Sony Japan. A security vulnerability exists in Sony SNC-M1 version 1.30 and earlier, which stems from the use of default credentials in the management interface...

CVE-2024-4031

Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code...

CVE-2024-28237

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

CVE-2023-1188

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached...

CVE-2023-1186

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally ...

CVE-2023-1187

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack...

CVE-2023-0365

The React Webcam WordPress plugin through 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-23488

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are vulnerable to Insertion of Sensitive Information Into Sent Data. The moderators-only webcams lock setting is not enforced on the backend, which allows an attacker to subscribe to viewers' webcams, even when th...

CVE-2022-24890

Nextcloud Talk is a video and audio conferencing app for Nextcloud. In versions prior to 13.0.5 and 14.0.0, a call moderator can indirectly enable user webcams by granting permissions, if they were enabled before removing the permissions. A patch is available in versions 13.0.5 and 14.0.0. There...