841 matches found
Argus Surveillance DVR Directory Traversal (CVE-2018-15745)
A directory traversal vulnerability exists in Argus Surveillance DVR. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
CVE-2020-13093
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
CVE-2020-13093
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
Directory traversal
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
CVE-2020-13093
CVE-2020-13093 affects iSpyConnect.com Agent DVR, prior to version 2.7.1.0, exposing a path traversal vulnerability. The root cause is described as improper filtering of special path elements, enabling access to locations outside of a restricted directory. Impact details in the sources indicate p...
CVE-2020-13093
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...
CVE-2020-10514
iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command...
CVE-2020-10513
The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...
CVE-2020-10513
The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...
Improper access control
The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...
Command injection
iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command...
CVE-2020-10514
The CVE-2020-10514 issue affects iCatch DVR firmware prior to 20200103, with an input validation error that allows an attacker to execute arbitrary commands. The connected CNVD/NVD entries corroborate this and indicate upgrading to 20200103 or later is the likely remediation; no exploitation stat...
CVE-2020-10514 iCatch DVR - Command Injection
iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command...
CVE-2020-10513
CVE-2020-10513 affects the iCatch DVR firmware prior to 20200103. The issue is a broken access control in the file management interface, enabling a remote attacker to manipulate arbitrary files. Documents consistently describe the vulnerable component as the DVR’s file management interface and no...
CVE-2020-10513 iCatch DVR - Broken Access Control
The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...
Hackers Actively Exploited 0-Day in CCTV Camera Hardware
Multiple zero-day vulnerabilities were actively being exploited in CCTV security cameras manufactured by Taiwan-based LILIN, researchers found. The company, an IP video solution provider, was being targeted by hackers hijacking the company’s DVR hardware. Once commandeered, hackers then planted...
Multiple DDoS Botnets Exploited 0-Day Flaws in LILIN DVR Surveillance Systems
Multiple zero-day vulnerabilities in digital video recorders DVRs for surveillance systems manufactured by Taiwan-based LILIN have been exploited by botnet operators to infect and co-opt vulnerable devices into a family of denial-of-service bots. The findings come from Chinese security firm Qihoo...
CVE-2013-7487
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...
Code injection
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...