64 matches found
Amcrest Security Bypass Vulnerability
Amcrest is a webcam product from the American company Amcrest. A security vulnerability exists in Amcrest that stems from the device using the same hard-coded SSL private key for different customer installations of the program. An attacker could exploit the vulnerability to bypass cryptographic...
Black Hat 2018: IoT Security Issues Will Lead to Legal ‘Feeding Frenzy’
LAS VEGAS – The troves of insecure internet of things IoT devices have not yet led to widespread legal implications. But that’s set to change, a well-known attorney warned at Black Hat USA last week. Ijay Palansky, partner at the law firm Armstrong Teasdale, said at the conference last week that...
Scammers hacked webcams to secretly record videos & post on YouTube
By Carolina Malicious hackers and scammers have always come up with complex yet This is a post from HackRead.com Read the original post: Scammers hacked webcams to secretly record videos & post on YouTube...
CVE-2017-17106
Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...
CVE-2017-17106
Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages. Recent assessments...
CVE-2017-17106
Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...
Zivif Camera iptest.cgi Blind Remote Command Execution
This module exploits a remote command execution vulnerability in Zivif webcams. This is known to impact versions prior to and including v2.3.4.2103. Exploit was reported in CVE-2017-17105. Module Options msf use exploit/unix/http/zivif/ipcheckexec msf undefinedipcheckexec show actions ...actions...
LizardStresser IoT Botnets Part of 400Gbps DDoS Attacks
LizardStresser, a distributed denial of service botnet, has found new life leveraging hundreds of internet-based webcams in attacks against Brazilian-based banks, government agencies as well as a handful of U.S.-based gaming companies. Researchers at the Arbor’s Security Engineering and Response...
onthesnow.sk XSS vulnerability
Open Bug Bounty ID: OBB-152856 Description| Value ---|--- Affected Website:| onthesnow.sk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
nl.skiinfo.be XSS vulnerability
Open Bug Bounty ID: OBB-152852 Description| Value ---|--- Affected Website:| nl.skiinfo.be Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
skiinfo.no XSS vulnerability
Open Bug Bounty ID: OBB-152830 Description| Value ---|--- Affected Website:| skiinfo.no Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
Worldscope Webcams - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Worldscope Webcams published at the 'play' market has multiple vulnerabilities...
Webcams - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Webcams published at the 'play' market has multiple vulnerabilities...
WebCams - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application WebCams published at the 'play' market has multiple vulnerabilities...
World Webcams - Exported components, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application World Webcams published at the 'play' market has multiple vulnerabilities...
Webcams - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Webcams published at the 'play' market has multiple vulnerabilities...
GeoVision (GeoHttpServer) Webcams Remote File Disclosure Exploit
Exploit for hardware platform in category web applications !/usr/bin/python import os import sys import socket import binascii ''' Title : GeoVision GeoHttpServer WebCams Remote File Disclosure Exploit CVE-ID : none Product : GeoVision System : GeoHttpServer Affected : 8.3.3.0 may be more Impact ...
GeoVision (GeoHttpServer) Webcams - Remote File Disclosure
!/usr/bin/python import os import sys import socket import binascii ''' Title : GeoVision GeoHttpServer WebCams Remote File Disclosure Exploit CVE-ID : none Product : GeoVision System : GeoHttpServer Affected : 8.3.3.0 may be more Impact : Critical Remote : Yes Website link:...
WebcamXP 3.72.440/4.05.280 beta /pocketpc camnum Variable Arbitrary Memory Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit these issues to access potentially sensitive...
Windows Manage Webcam
This module will allow the user to detect installed webcams with the LIST action or take a snapshot with the SNAPSHOT action. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage...