CamShot WebCam 2.6 Trial - Remote Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1685/info CamShot is a Windows 95/98/2000/NT web server that serves up web pages containing time stamped images captured from a video camera. The images can be viewed from anywhere on the network with a web browser. CamSh...

Webcam Corp Webcam Watchdog 1.0/1.1/3.63 Web Server Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9351/info A problem has been identified in the handling of remote web requests by the Webcam Watchdog software. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable system...

PY Software Active Webcam 4.3 Webserver Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9260/info It has been reported that Active Webcam webserver may be prone to a directory traversal vulnerability that may allow a remote attacker to gain access to sensitive information, which may be used to launch further...

Dell Webcam Software Bundled ActiveX Remote Buffer Overflow Vulnerability

No description provided by source...

SasCam WebCam Server 2.6.5 - ActiveX SEH Overwrite

No description provided by source. html object classid='clsid:0297D24A-F425-47EE-9F3B-A459BCE593E3' id='target'/object script language = 'vbscript' 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP...

Webcam Corp Webcam Watchdog 4.0.1 sresult.exe Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10837/info Reportedly Webcam Corp Webcam Watchdog is affected by a remote cross-site scripting vulnerability in the sresult.exe binary. This issue is due to a failure of the application to properly sanitize user-supplied...

dcam webcam server personal web server 8.2.5 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9273/info It has been reported that the Personal Web Server of DCAM WebCam Server may be prone to a directory traversal vulnerability that may allow a remote attacker to traverse outside the server root directory by using...

SasCam Webcam Server 2.6.5 Get() method - Buffer Overflow

No description provided by source. $Id: sascamget.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Yahoo! Webcam ActiveX Control 2.0 .0.107 Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8634/info A buffer overrun has been discovered in the Yahoo! Webcam ActiveX control. The problem occurs due to insufficient bounds checking when handling user-supplied Webcam parameters. As a result, an attacker may be...

py software active webcam webserver 4.3/5.5 - Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12778/info Active Webcam webserver is reported prone to multiple vulnerabilities. The following individual issues are reported: The first issue, a denial of service is reported to manifest when a request is received for a...

BroadGun Software CamShot WebCam 2.5 GET Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/905/info CamShot is a webserver designed to work in conjunction with computer video cameras. The software will crash, and possibly allow for execution of arbitrary code, if a GET request of more than 2000 bytes is receive...

Fake Webcam 6.1 - Local Crash PoC

No description provided by source. !/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 -...

WordPress Video Posts Webcam Recorder Plugin <= 1.55.4 - XSS

Because of this vulnerability in posts/videowhisper/rlogout.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

SA-CONTRIB-2014-061 - VideoWhisper Webcam Plugins - Cross Site Scripting (XSS) - Unsupported

Includes multiple modules for video communications including room listing, pay per view access control. The module doesn't sufficiently filter user supplied text from the url reflected cross site scripting. No special permissions are required to exploit this issue. There are no mitigating factors...

Video Comments Webcam Recorder <= 1.55 - Unauthenticated Reflected XSS

The Video Comments Webcam Recorder WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability...

Firefox Webcam Chat on Privileged JavaScript Shell

This module allows streaming a webcam from a privileged Firefox JavaScript shell. Module Options msf use post/firefox/manage/webcam/chat msf undefinedchat show actions ...actions... msf undefinedchat set ACTION msf undefinedchat show options ...show and set options... msf undefinedchat run This...

CVE-2014-2715

Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...

CVE-2014-2715

VideoWhisper Webcam Plugins (Drupal 7.x) are affected by CVE-2014-2715 due to cross-site scripting in vwrooms/templates/logout.tpl.php. The vulnerability allows injecting arbitrary script via the module or message parameters in index.php, caused by reflected user input. Impact is XSS; exploit det...

CVE-2014-2715

Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...

Mozilla多个产品WebRTC会话权限提示伪造攻击漏洞

CVE ID:CVE-2014-1499 Mozilla Firefox/SeaMonkey是Mozilla所发布的WEB浏览器/新闻组客户端。 Mozilla多个产品处理WebRTC会话权限提示时存在错误会显示错误的域名，允许攻击者利用漏洞构建恶意WEB页，诱使用户解析，进行伪造攻击，可用于访问webcam或麦克风。 0 Mozilla Firefox 27 Mozilla Seamonkey 2.24 Mozilla Firefox 28，Seamonkey 2.25已经修复该漏洞，建议用户下载更新： http://www.mozilla.org...