CVE-2019-20085

📂 CVE-2019-20085 – TVT NVMS-1000 目录遍历漏洞利用工具 By Z3R0 作者： Z3R0 CVE： CVE-2019-20085 目标： TVT NVMS-1000（补丁发布前的所有已知版本） 漏洞类型： 未认证目录遍历 日期： 请填写你的发布日期 🔍 漏洞概述 TVT 的 NVMS-1000 软件在其 Web 服务器组件中存在一个目录遍历漏洞。通过发送使用 /.. 序列精心构造的 GET 请求，未认证的攻击者可以访问 底层操作系统上的任意文件 ，包括敏感配置文件、密码哈希或系统密钥。 ⚠️ 受影响软件 产品： TVT NVMS-1000 版本：...

TVT NVMS 1000 - Local File Inclusion

TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. id: CVE-2019-20085 info: name: TVT NVMS 1000 - Local File Inclusion author: daffainfo severity: high description: | TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. impact: | An attacker can exploit this...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash 针对NVMS-1000（CVE-2019-20085）用Bash编写的目录遍历利用工具。 Usage ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer 此POC仅用于教育目的。 Reference https://www.exploit-db.com/exploits/48311...

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

TVT NVMS-1000 Directory Traversal Vulnerability

TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests...

VulnCheck KEV: CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

Weak password vulnerability in NVMS-1000 of Shenzhen Tongwei Digital Technology Co.

NVMS-1000 is a video surveillance management software launched by Shenzhen Tongwei Digital Technology Co., Ltd, which can be used with DVR, NVR, IPC, DVS, decoder and so on. Shenzhen Tongwei Digital Technology Co., Ltd NVMS-1000 suffers from a weak password vulnerability, which can be exploited b...

TVT NVMS 1000 - Directory Traversal Exploit

Exploit for hardware platform in category web applications Exploit Title: TVT NVMS 1000 - Directory Traversal Exploit Author: Mohin Paramasivam Shad0wQu35t Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html Original Author : Numan Türle CVE...

TVT NVMS 1000 Directory Traversal

Exploit Title: TVT NVMS 1000 - Directory Traversal Date: 2020-04-13 Exploit Author: Mohin Paramasivam Shad0wQu35t Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html Original Author : Numan Türle CVE : CVE-2019-20085 import sys import reques...

TVT NVMS 1000 - Directory Traversal

Exploit Title: TVT NVMS 1000 - Directory Traversal Date: 2020-04-13 Exploit Author: Mohin Paramasivam Shad0wQu35t Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html Original Author : Numan Türle CVE : CVE-2019-20085 import sys import reques...

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

Directory traversal

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

CVE-2019-20085

Summary: CVE-2019-20085 affects TVT NVMS-1000 devices, enabling directory traversal through GET /.. requests and potentially exposing sensitive files. The normal/affected component is the NVMS-1000 web interface handling file paths, with a root cause linked to directory traversal exposure. Public...

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

PT-2019-6139 · Tvt · Tvt Nvms-1000

Name of the Vulnerable Software and Affected Versions: TVT NVMS-1000 affected versions not specified Description: The issue is related to directory traversal in TVT NVMS-1000 devices, allowing unauthorized access to restricted information. This is due to incorrect limitation of the path name to a...

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2019-20085: Improper Limitation of a Pathname to a Restricted Directory

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

TVT NVMS-1000 Directory Traversal Vulnerability

TVT Digital Technology TVT NVMS-1000 is a network surveillance video management system from TVT Digital Technology, China. A directory traversal vulnerability exists in the TVT Digital Technology TVT NVMS-1000. The vulnerability stems from a failure of a network system or product to properly filt...

NVMS 1000 - Directory Traversal Vulnerability

Exploit for hardware platform in category web applications Title: NVMS-1000 - Directory Traversal Author: Numan Türle Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html POC --------- GET /../../../../../../../../../../../../windows/win.ini...