Everfocus 1.4 - EDSR Remote Authentication Bypass

Everfocus 1.4 - EDSR Remote Authentication Bypass Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR...

Everfocus <= 1.4 EDSR Remote Authentication Bypass

No description provided by source. Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR firmware don't...

Everfocus 1.4 - EDSR Remote Authentication Bypass

Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR firmware don't handle correctly users...

Improper access control

The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini...

CVE-2009-2306

The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini...

CVE-2009-2305

The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ slash slash dot backslash sequences...

CVE-2009-2306

The CVE-2009-2306 issue affects the ARD-9808 DVR card security camera. The vulnerability arises from storing sensitive information under the web root with insufficient access control, enabling remote attackers to download a file (dvr.ini) containing usernames and passwords via a direct request. N...

CVE-2009-2305

The CVE-2009-2305 entry concerns the ARD-9808 DVR card security camera. The vulnerability arises from how the device processes long URIs composed of //.\ sequences, enabling remote attackers to cause a denial of service. The available sources confirm the affected device and the impact (availabili...

CVE-2009-2306

The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini...

ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit

No description provided by source. import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print...

ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln

No description provided by source. ------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procuts Site :...

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print...

ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln

Exploit for hardware platform in category remote exploits ================================================================== ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln ==================================================================...

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure ------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procut...

ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit

Exploit for hardware platform in category dos / poc ================================================================== ARD-9808 DVR Card Security Camera GET Request Remote DoS Exploit ================================================================== import socket import sys print...

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure

------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procuts Site :...

[DSECRG-09-036] Chance-i Techno Vision Security System - Directory Traversal File Download

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

Chance-i DiViS DVR System multiple security vulnerabilities

Web server directory traversal, ActiveX bufer overflow...

Chance-i DiViS DVR System Web-server Directory Traversal Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal...

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow (PoC)

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL:...