EUVD-2025-15745

Malicious code in bioql PyPI...

CVE-2019-15745

The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. The communication happens over UDP port 27431. An attacker on the local network can use the same key to encrypt and send commands to discover all smart...

Argus Surveillance DVR 4.0.0.0 - Directory Traversal

This module leverages an unauthenticated arbitrary file read for the Argus Surveillance 4.0.0.0 system which never saw an update since. As this is a Windows related application we recommend looking for common Windows file locations, especially C:\ProgramData\PYSoftware\Argus Surveillance...

LibTIFF out-of-bounds read vulnerability (CNVD-2023-15745)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from an out-of-bounds read vulnerability that stems from a boundary error in tiffcrop at libtiff/tifunix.c:368 when...

CVE-2020-15745

CVE-2020-15745 entry is rejected/not used, as stated in the Initial Description.

CVE-2019-15745

The CVE-2019-15745 entry concerns the Eques elf smart plug (and its mobile app). The vulnerability arises from a hardcoded AES-256 key used to encrypt commands/responses between the device and the app, with communication over UDP port 27431. According to the sources, an attacker on the local netw...

CVE-2018-15745

CVE-2018-15745 affects Argus Surveillance DVR 4.0.0.0. Unauthenticated directory traversal allows file disclosure via a ..%2F sequence in the WEBACCOUNT.CGI RESULTPAGE parameter, enabling an attacker to read sensitive server files. The NVD and related advisories confirm a local file inclusion/vec...

Argus Surveillance DVR 4.0.0.0 Directory Traversal Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txt + ISR: Apparition Security Greetz: Greetz: indoushka | Eduardo | GGA Vendor...

CVE-2018-15745

creationtimestamp| type| source ---|---|--- 2018-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45296 2025-01-31 22:05:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/argusdvr4lficve201815745.rb 2025-02-01 23:08:24+00:00|...

Argus Surveillance DVR 4.0.0.0 Directory Traversal

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txt + ISR: Apparition Security Greetz: Greetz: indoushka | Eduardo | GGA Vendor...

CVE-2017-15745

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."...

CVE-2017-15745

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."...

CVE-2017-15745

IrfanView 4.50 64‑bit with CADImage plugin 12.0.0.5 is affected by a vulnerability triggered by a crafted .dwg file, leading to DoS and potentially other impacts (root cause involves Data from Faulting Address/Branch Selection at CADIMAGE+0x…002ca2e). The issue is due to a buffer handling flaw in...