Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vulnerability

Pelco VideoXpert suffers from a directory traversal vulnerability. Exploiting this issue will allow an unauthenticated attacker to view arbitrary files within the context of the web server. Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vendor: Schneider Electric SE...

Pelco VideoXpert 1.12.105 - Directory Traversal

Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: 2.0.41 1.14.7 1.12.105 Summary: VideoXpert is a video management solution designed for scalability, fitting the needs surveillance...

Huawei SMC2.0 Denial of Service Vulnerability

Huawei SMC2.0 is a video management solution from Huawei, China. The solution supports both H.323 and SIP protocols, and supports access from computers and cell phones. A denial of service vulnerability exists in Huawei SMC2.0, which originates from the program failing to adequately validate...

Multi-meter (DuomiCms) movie and television management system type and order parameters SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'type' and 'order' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from th...

Unspecified Vulnerability in Schneider Electric Pelco Digital Sentry Video Management System

Schneider Electric Pelco Digital Sentry Video Management System is a video recording system from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Digital Sentry Video Management System using firmware prior to version 7.13, which stems from the program's u...

CVE-2016-4520

Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors...

Hardcoded credentials

Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors...

CVE-2016-4520

CVE-2016-4520 affects Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14, which contains hard-coded credentials that may allow remote attackers to gain access and, consequently, execute arbitrary code. The vulnerability is exploitable remotely over the netwo...

VDG Security SENSE Design Vulnerability

VDG Security SENSE is a video management system VMS from VDG Security in the Netherlands. VDG Security SENSE formerly DIVA version 2.3.13 performs authentication using a password hash instead of a password, allowing a remote attacker to gain login privileges by exploiting knowledge of the passwor...

VDG Security SENSE Information Disclosure Vulnerability (CNVD-2015-00378)

VDG Security SENSE is a video management system VMS from VDG Security in the Netherlands. An information disclosure vulnerability exists in VDG Security SENSE version 2.3.13, which allows remote attackers to exploit the vulnerability to gain access...

VDG Security SENSE Information Disclosure Vulnerability (CNVD-2015-00381)

VDG Security SENSE is a video management system VMS from VDG Security in the Netherlands. VDG Security SENSE suffers from an information disclosure vulnerability that allows an attacker to obtain sensitive information by reading plugin configuration files...

VDG Security SENSE Information Disclosure Vulnerability (CNVD-2015-00379)

VDG Security SENSE is a video management system VMS from VDG Security in the Netherlands. An information disclosure vulnerability exists in VDG Security SENSE version 2.3.13, which allows an authenticated remote user to obtain username and password hashes by logging on to TCP port 51410 and readi...

Multiple Buffer Overflow Vulnerabilities in VDG Security SENSE

VDG Security SENSE is a video management system. Multiple buffer overflow vulnerabilities in the VDG Security SENSE DIVA web service API allow remote attackers to submit a special AuthenticateUser request to execute arbitrary code via the user or password parameters...

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Document Title: =============== Private Camera Pro v5.0 iOS - Multiple Web Vulnerabilities Product & Service Introduction: =============================== Private Camera is an iPhone and iPad camera app that could protect your privacy. It...

Feifei television systems PHP version v1. 9 injection exploit-vulnerability warning-the black bar safety net

Article author: honglousy Yesterday the whole hacking Forum next station on the program, found that people also really many. Simply write the exp. Boring as... ? php / Fly fly video management system SQL injection Feifei television systems PHP version v1. 9 injection exploit by:www.08sec.com fans...

Apple iTunes CoreAudio缓冲区溢出漏洞

BUGTRAQ ID: 50065 CVE ID: CVE-2011-3252 iTunes是一款媒体播放器的应用程序，2001年1月10日由苹果电脑在旧金山的Macworld Expo推出，用来播放以及管理数字音乐和与视频文件，是管理苹果iPod的文件的主要工具。 Apple iTunes在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞执行任意代码，可能造成拒绝服务。 此漏洞源于应用解析高级音频解码器编码的音频流的方式，会读取文件中的字段以计算长度，稍后会用在内存复制到静态缓冲区操作中。 Apple iTunes 10.x 厂商补丁： Apple -----...