Samsung Web Viewer for Samsung DVR allows authentication bypass and password disclosure

Overview Samsung Web Viewer for Samsung DVR contains multiple vulnerabilities including: Cleartext Storage in a File or on Disk CWE-313 and Authentication Bypass by Assumed-Immutable Data CWE-302. Description CWE-313: Cleartext Storage in a File or on Disk - CVE-2013-3585Web Viewer for Samsung DV...

PT-2013-61: Disclosure of sensitive information in Web Viewer for Samsung DVR

The specialists of the Positive Research center have detected "Disclosure of sensitive information" vulnerability associated with Absence of Password Hashing in Web Viewer for Samsung DVR. Users credentials logins and passwords are stored in plaintext at pages, not hashed or encrypted. This...

CVE-2011-1719

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

CVE-2011-1719

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

Stack overflow

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

CVE-2011-1719

CVE-2011-1719 involves multiple stack-based buffer overflows in the CA Output Management Web Viewer ActiveX controls (PPSView.ocx and UOMWV_HelperActiveX.ocx). The root cause is boundary/overflow errors in the ActiveX components used by the Web Viewer (versions 11.0 and 11.5). The flaws permit re...

CVE-2011-1719

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

Anonymous launches Anonleaks.ru to expose HBGary 27,000 Emails, Data available soon !

Anonymous launches Anonleaks.ru to expose HBGary 50000 Emails, data available soon ! Anonymous plans to release 27,000 emails from the server of Greg Hoglund, chief executive of the software security firm HBGary. It has posted 50,000 emails of Aaron Barr from the CEO of its sister organization, H...

CVE-2004-0204

CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...