NUUO NVRMini2 Remote Code Execution (CVE-2018-1149)

A buffer overflow vulnerability exists in the HTTP interface of NUUO's NVRMini2 Network Video Recording systems. A remote unauthenticated attacker may use this vulnerability to execute arbitrary code on the vulnerable server...

CVE-2018-1149

creationtimestamp| type| source ---|---|--- 2018-09-19 17:42:27+00:00| seen| MISP/5ba2897d-c56c-497c-a45d-3bd00a021402...

CVE-2018-1149

cgisystem in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests...

CVE-2018-1149

cgisystem in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests...

CVE-2018-1149

CVE-2018-1149 affects NUUO NVRMini2 (and NVRSolo per ICS advisory) with firmware up to 3.8.0. A stack-based buffer overflow in the HTTP CGI interface (cgi_system) allows remote, unauthenticated code execution via crafted HTTP requests (cookie header causing overflow). Also documented is CVE-2018-...

kingslodgeinn.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-677813 Description| Value ---|--- Affected Website:| kingslodgeinn.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NUUO NVR < 3.9.1 Multiple Vulnerabilities

NUUO Network Video Recorder NVR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nuuo:nuuo";...

NUUO NVRMini2 Multiple Vulnerabilities

The version of NUUO NVRMini2 installed on the remote host is affected by multiple vulnerabilities: - NUUO NVRMini2 web server utilizes CGI binaries in order to handle a variety of commands that require authenticated interaction. Implemented session handling mechanism doesn't validate user's input...