EUVD-2018-15638

Malware in sbrugna...

CVE-2020-27868

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint...

Qognify Ocularis Insecure Deserialization (CVE-2020-27868)

An insecure deserialization vulnerability exists in Qognify Ocularis. Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code on the target system...

CVE-2020-27868

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint...

CVE-2020-27868

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint...

CVE-2020-27868

CVE-2020-27868 affects Qognify Ocularis 5.9.0.395. The root cause is insecure deserialization of untrusted data handled by the EventCoordinator’s connected-channel path, enabling remote code execution with SYSTEM privileges. Multiple connected sources (Red Hat, Checkpoint/PRION, NVD, ZDI, CVE lis...

CVE-2020-27868

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint...

Qognify Ocularis Code Issue Vulnerability

A code issue vulnerability exists in Qognify Ocularis that arises from improper design or implementation during code development for a network system or product...

Qognify Ocularis EventCoordinator ConnectedChannel_GotMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint. The issue...

OnSSI Ocularis Recorder 5.5 < Patch 10 / 5.4 < Patch 19 / 5.3 < Patch 19 Denial of Service (DoS) Vulnerability

The version of OnSSI Ocularis Recorder installed on the remote Windows host is 5.5 prior to Patch 10, 5.4 prior to Patch 19, or 5.3 prior to Patch 19. It is, therefore, affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description...

OnSSI Ocularis Recorder Installed

Binary data onssiocularisrecorderinstalled.nbin...

OnSSI Ocularis Denial of Service Vulnerability

OnSSI Ocularis is a scalable video management system for small to medium-sized single-site and multi-site applications from OnSSI, USA. A denial of service vulnerability exists in the Ocularis Recorder feature of OnSSI Ocularis version 5.5.0.242. An attacker can exploit the vulnerability by sendi...

Denial of service

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

CVE-2018-3852

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

CVE-2018-3852

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

CVE-2018-3852

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

CVE-2018-3852

CVE-2018-3852 affects OnSSI Ocularis Recorder 5.5.0.242. The DoS arises from a vulnerability in the Ocularis Recorder component where a specially crafted TCP packet can cause the process to terminate, resulting in denial of service. The TALOS report details that the binary listens on a TCP port (...

PT-2018-16246 · Onssi · Ocularis

Name of the Vulnerable Software and Affected Versions: Ocularis version 5.5.0.242 Description: A denial of service issue exists in the Ocularis Recorder functionality. It can be triggered by a specially crafted TCP packet, causing a process to terminate. This allows an attacker to send a crafted...

Ocularis Recorder VMS_VA Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability. Test...

Vulnerability Spotlight: TALOS-2018-0535 - Ocularis Recorder VMS_VA Denial of Service Vulnerability

Vulnerabilities discovered by Carlos Pacho from Talos Overview Talos is disclosing a denial-of-service vulnerability in the Ocularis Recorder. Ocularis is a video management software VMS platform used in a variety of settings, from convenience stores, to city-wide deployments. An attacker can...