1162 matches found
CVE-2024-22515
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
CVE-2024-22515
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
Authorization
An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...
CVE-2024-22514
An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...
CVE-2024-22515
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
CVE-2024-22515: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
CVE-2024-22514: Improper Limitation of a Pathname to a Restricted Directory
An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...
CVE-2024-22514
Summary: CVE-2024-22514 affects iSpyConnect.com Agent DVR 5.1.6.0, where restoring a crafted backup file enables arbitrary file execution (RCE) via manipulation of backup/restore handling, including edits to objects.xml to trigger commands with the program’s privileges. Related documents (exploit...
CVE-2024-22515
CVE-2024-22515 affects iSpyConnect Agent DVR 5.1.6.0 with an unrestricted file-upload in the audio upload component. Root cause per sources is lack of verification of the uploaded file type, enabling arbitrary file uploads. This vulnerability can lead to high impact on confidentiality, integrity,...
CVE-2024-22515
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...
CVE-2023-47353
IMOU GO v1.0.11 is affected by CVE-2023-47353 due to the com.oneed.dvr.service.DownloadFirmwareService component, which allows an attacker to force the download of arbitrary files. The CVE notes network exposure with low attack complexity, requiring user interaction, and impact on confidentiality...
CVE-2024-22514
An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...
PT-2024-19460
Name of the Vulnerable Software and Affected Versions Agent DVR version 5.1.6.0 Description The issue allows attackers to upload arbitrary files via the upload audio component, potentially leading to unauthorized access or malicious activity. The estimated number of potentially affected devices a...
iSpyConnect.com Agent DVR Security Vulnerability
iSpyConnect.com Agent DVR is a cross-platform video surveillance software. A security vulnerability exists in iSpyConnect.com Agent DVR version 5.1.6.0. An attacker can exploit the vulnerability to run arbitrary files by restoring a specially crafted backup file...
Agent DVR Backup Restore Code Execution File Upload
The vulnerability of the Backup/Restore function of the video surveillance software for DVR systems is related to incorrect restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to execute arbitrary commands and upload arbitrary files...
Hitron Systems Security Camera DVR
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor : Hitron Systems Equipment : DVR Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of these...
VulnCheck KEV: CVE-2024-23842
Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
VulnCheck KEV: CVE-2024-22770
Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...