EUVD-2018-2747

Malware in sbrugna...

Information disclosure

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

CVE-2018-10676

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

CVE-2018-10676

CVE-2018-10676 affects CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices. A remote attacker can download a file and obtain sensitive credential information by directly requesting the download.rsp URI, exposing a likely information-disclosure vulnerability. The CVSS data i...

PT-2018-10046

Name of the Vulnerable Software and Affected Versions CeNova versions affected versions not specified Night OWL versions affected versions not specified Novo versions affected versions not specified Pulnix versions affected versions not specified QSee versions affected versions not specified...

CVE-2018-10676: Undefined Security Weakness

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

Authentication flaw

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

CVE-2018-9995

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a “Cookie: uid=admin”...