CVE-2023-3704: Improper Input Validation

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

PT-2023-25770

Name of the Vulnerable Software and Affected Versions CP-Plus DVR affected versions not specified Description The issue exists due to improper input validation within the web-based management interface. An unauthenticated remote attacker could exploit this by sending specially crafted HTTP reques...

CP-Plus DVR: Input validation error vulnerability

CP-Plus DVR is a digital video recorder from CP-Plus. A security vulnerability exists in CP-Plus DVR that stems from incorrect input validation, which allows an unauthenticated, remote attacker to change the system time of a target device by sending a specially crafted HTTP request to the...

Exploit for CVE-2018-9995

CVE-2018-9995 - DVR Authentication Bypass This repository add...

TBK DVR4104 DVR4216 Control Panel Bypass Unauthorized Access

The vulnerability of the control panel of the microprogrammed software for DVR devices TBK DVR4104 and TBK DVR4216 lies in the lack of measures to neutralize special elements during the processing of the Cookie header: uid=admin. Exploiting this vulnerability allows a remote attacker to bypass...

Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack

A nascent botnet called Andoryu has been found to exploit a now-patched critical security flaw in the Ruckus Wireless Admin panel to break into vulnerable devices. The flaw, tracked as CVE-2023-25717 CVSS score: 9.8, stems from improper handling of HTTP requests, leading to unauthenticated remote...

Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording DVR devices, according to an advisory issued by Fortinet FortiGuard Labs. The vulnerability in question is CVE-2018-9995 CVSS score: 9.8, a critical authentication bypass issue that could b...

PT-2023-11231 · Undefined · Undefined

Хакеры эксплуатируют уязвимость пятилетней давности, взламывая видеокамеры в банках Исследователи Fortinet FortiGuard Labs предупреждают, что злоумышленники активно эксплуатируют критическую неисправленную уязвимость, влияющую на устройства цифровой видеозаписи DVR TBK. Недостаток, отслеживаемый...

USN-6009-1: Linux kernel (GCP) vulnerabilities

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that a use-after-free vulnerability existed in the SGI GRU...

Exploit for Inadequate Encryption Strength in Argussurveillance Dvr

Argus Surveillance DVR 4.0 - Weak Password Encryption CVE-2...

CVE-2023-23458

Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request...

CVE-2023-23463

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

Design/Logic Flaw

Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request...

Design/Logic Flaw

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

CVE-2023-23463

The CVE-2023-23463 entry concerns Sunell DVR, latest version, with a vulnerability labeled as Insufficiently Protected Credentials (CWE-522) that may be exposed through an unspecified request. This is a network‑driven issue (CVSSv3.1 base score 7.5, HIGH) with no detailed exploit path provided in...

CVE-2023-23458

Sunell DVR (latest version) is affected by CVE-2023-23458, which involves CWE-200: Exposure of Sensitive Information to an Unauthorized Actor from an unspecified request. The NVD entry documents a network-accessible issue with low attack complexity and low privileges required, leading to potentia...

CVE-2023-23458 Sunell DVR – Exposure of Sensitive Information

Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request...

CVE-2023-23463 Sunell DVR – Insufficiently Protected Credentials

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

CVE-2023-23458 Sunell DVR – Exposure of Sensitive Information

Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request...

CVE-2023-23463: Insufficiently Protected Credentials

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...