35 matches found
CVE-2024-22515
CVE-2024-22515 affects iSpyConnect Agent DVR 5.1.6.0 with an unrestricted file-upload in the audio upload component. Root cause per sources is lack of verification of the uploaded file type, enabling arbitrary file uploads. This vulnerability can lead to high impact on confidentiality, integrity,...
CVE-2024-22515: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
CVE-2024-22514
Summary: CVE-2024-22514 affects iSpyConnect.com Agent DVR 5.1.6.0, where restoring a crafted backup file enables arbitrary file execution (RCE) via manipulation of backup/restore handling, including edits to objects.xml to trigger commands with the program’s privileges. Related documents (exploit...
CVE-2024-22514
An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...
CVE-2024-22515
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
The vulnerability of the backup/restore function of the video surveillance software Agent DVR allows a intruder to execute arbitrary code and upload arbitrary files.
The vulnerability of the Backup/Restore function of the video surveillance software for DVR systems is related to incorrect restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to execute arbitrary commands and upload arbitrary files...
Exploit for Code Injection in Ispyconnect Agent_Dvr
CVE-2024-22514: Remote Code Execution in Agent DVR Informa...
Exploit for Unrestricted Upload of File with Dangerous Type in Ispyconnect Agent_Dvr
CVE-2024-22515: File Upload Vulnerability in Agent DVR Inf...
PT-2024-1417 · Agent Dvr · Agent Dvr
Name of the Vulnerable Software and Affected Versions: Agent DVR version 5.1.6.0 Description: The issue is related to the Backup/Restore function in Agent DVR software, which is used for video surveillance. It involves incorrect restriction of the path name to a directory with limited access...
CVE-2020-13093
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
CVE-2020-13093
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
Directory traversal
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
CVE-2020-13093
CVE-2020-13093 affects iSpyConnect.com Agent DVR, prior to version 2.7.1.0, exposing a path traversal vulnerability. The root cause is described as improper filtering of special path elements, enabling access to locations outside of a restricted directory. Impact details in the sources indicate p...