545 matches found
CVE-2009-0865
Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...
GeoVision LiveX ActiveX控件SnapShotToFile()方式任意文件覆盖漏洞
BUGTRAQ ID: 33782 GeoVision LiveX是用于管理GeoVision视频监控系统的软件。 GeoVision的LiveXv7000（clsid DA8484DE-52DB-4860-A986-61A8682E298A）和LiveXv8120（clsid F4421170-DB22-4551-BBFB-FFCFFB419F6F）ActiveX控件没有正确地验证对SnapShotToFile和SnapShotX方式输入的参数，如果用户受骗访问了恶意网页并向上述方式传送了恶意参数的话，就会导致向用户系统写入任意文件。 GeoVision LiveX ActiveX...
GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC
No description provided by source. !-- GeoVision LiveXv8200 ActiveX Control LIVEX1.OCX remote file corruption poc by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ working against IE8b/xpsp3, safe for scripting and for initialize. LiveXv7000 with clsid...
GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC
Exploit for unknown platform in category remote exploits ================================================================ GeoVision LiveXv8200 ActiveX LIVEX1.OCX File Corruption PoC ================================================================ function sleepn var now = new Date; var exitTime =...
GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption
function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="SvrType" va...
GeoVision ActiveX File Corruption
function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="AutoLogin" v...
GeoVision LiveX 8200 - ActiveX LIVEX_~1.OCX File Corruption
GeoVision LiveX 8200 - ActiveX LIVEX1.OCX File Corruption function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; par...
GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln
No description provided by source. Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan...
Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver)
Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...
Geovision Digital Video Surveillance System directory traversal
No description provided...
GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln
Exploit for unknown platform in category remote exploits =================================================================== GeoVision Digital Video Surveillance System geohttpserver DT Vuln =================================================================== Hi. There is a Directory traversal...
GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure
GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has...
GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure
Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...
GeoVision Directory Traversal
Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...
CVE-2005-1552
GeoVision Digital Video Surveillance System versions 6.04, 6.1 and 7.0 expose JPEG images despite having a password/username set, due to improper protection of image files. The issue allows remote attackers to obtain sensitive information by making a direct request to the image, effectively bypas...
CVE-2005-1553
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 use a weak password encryption scheme that enables password sniffing by remote attackers. The provided documents do not include specifics on affected components, root cause details beyond the weak crypto description, or a published rem...
CVE-2005-1553
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing...
CVE-2005-1552
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image...
GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access
GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue...
