Information Disclosure

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET system.…CVE-2017-5674Embedthis · 22% likely

   CWE-200

2. The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting. This means that an unauthenticated ne…CVE-2021-43298embedthis · 2.3% likely

   CWE-208

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.