GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4...

Directory traversal

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

CVE-2009-0865 affects the GeoVision LiveX ActiveX control (LIVEX_~1.OCX) versions 8.1.2 and 8.2.0, specifically the SnapShotToFile method. A directory traversal flaw allows a remote attacker to create or overwrite arbitrary files by supplying a .. payload in the argument, potentially via PlayX an...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

GeoVision LiveX ActiveX控件SnapShotToFile()方式任意文件覆盖漏洞

BUGTRAQ ID: 33782 GeoVision LiveX是用于管理GeoVision视频监控系统的软件。 GeoVision的LiveXv7000（clsid DA8484DE-52DB-4860-A986-61A8682E298A）和LiveXv8120（clsid F4421170-DB22-4551-BBFB-FFCFFB419F6F）ActiveX控件没有正确地验证对SnapShotToFile和SnapShotX方式输入的参数，如果用户受骗访问了恶意网页并向上述方式传送了恶意参数的话，就会导致向用户系统写入任意文件。 GeoVision LiveX ActiveX...

GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

Exploit for unknown platform in category remote exploits ================================================================ GeoVision LiveXv8200 ActiveX LIVEX1.OCX File Corruption PoC ================================================================ function sleepn var now = new Date; var exitTime =...

GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

No description provided by source. !-- GeoVision LiveXv8200 ActiveX Control LIVEX1.OCX remote file corruption poc by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ working against IE8b/xpsp3, safe for scripting and for initialize. LiveXv7000 with clsid...

GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="SvrType" va...

GeoVision ActiveX File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="AutoLogin" v...

GeoVision LiveX 8200 - ActiveX LIVEX_~1.OCX File Corruption

GeoVision LiveX 8200 - ActiveX LIVEX1.OCX File Corruption function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; par...

GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln

No description provided by source. Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan...

Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver)

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...

Geovision Digital Video Surveillance System directory traversal

No description provided...

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has...

GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln

Exploit for unknown platform in category remote exploits =================================================================== GeoVision Digital Video Surveillance System geohttpserver DT Vuln =================================================================== Hi. There is a Directory traversal...

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...

GeoVision Directory Traversal

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...

CVE-2005-1552

GeoVision Digital Video Surveillance System versions 6.04, 6.1 and 7.0 expose JPEG images despite having a password/username set, due to improper protection of image files. The issue allows remote attackers to obtain sensitive information by making a direct request to the image, effectively bypas...