Hikvision IP Cameras Overflow / Bypass / Privilege Escalation

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Hikvision IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: Hikvision IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0708 Advisory URL:...

Hikvision IP Cameras 4.1.0 b130111 - Multiple Vulnerabilities

Hikvision IP Cameras 4.1.0 b130111 - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Hikvision IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: Hikvision IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0708 Advisory URL:...

CVE-2012-4976

Layton Helpbox 4.4.0 is affected by CVE-2012-4976. The vulnerable page is selectawasset.asp, where the querystring element=sys_asset_id is not properly sanitized during error-page construction, leading to disclosure of ODBC database credentials in cleartext. This credential exposure can allow an ...

CVE-2010-4976

The CVE-2010-4976 issue affects MetInfo 3.0, specifically the search/search.php handler. The vulnerability arises in the searchword parameter (the Search Box field), enabling remote attackers to inject arbitrary web script or HTML (classic XSS). The description notes that details are from third-p...

CVE-2009-4976

Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

CVE-2009-4976

Technical details for CVE-2009-4976 are not provided in the supplied documents. Connected records mention related CVEs (e.g., CVE-2010-2536) but do not specify affected products, root cause, or remediation. Monitor for updates.

CVE-2009-4976

Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

CVE-2008-4976

CVE-2008-4976 affects ogle 0.9.2 and ogle-mmx 0.9.2. It enables local users to overwrite arbitrary files via a symlink attack on predictable /tmp/ogle_… temporary files (ogle_audio, ogle_cli, ogle_ctrl, ogle_gui, ogle_mpeg_ps, ogle_mpeg_vs, ogle_nav, ogle_vout) tied to corresponding debug scripts...

FreeBSD : coppermine -- multiple vulnerabilities (12488805-6773-11dc-8be8-02e0185f8d72)

The coppermine development team reports two vulnerabilities with the coppermine application. These vulnerabilities are caused by improper checking of the log variable in 'viewlog.php' and improper checking of the referer variable in 'mode.php'. This could allow local file inclusion, potentially...

CVE-2007-4976

CVE-2007-4976 involves a directory traversal in Coppermine Photo Gallery (CPG) prior to or including 1.4.12. The flaw is in viewlog.php: an unsafely handled log parameter can be exploited to include and execute arbitrary local files by using ".." (dot dot). The vulnerability requires authenticati...

CVE-2006-4976

CVE-2006-4976 : The Date Library in John Lim ADOdb Library for PHP permits remote information disclosure via direct requests to a large set of files across the package. Affected areas include: server.php, adodb-.inc.php (adodb-errorpear.inc.php, adodb-iterator.inc.php, adodb-pear.inc.php, adodb-p...

MS:0F32DF7A-4976-46AB-94F6-DBF2E8FD303E

...

MS:896361F0-FF78-4976-8757-FC4C525D1797

...