48 matches found
PT-2024-16900 · Unknown · Trcore Dvc
Name of the Vulnerable Software and Affected Versions: TRCore DVC versions up to 6.3 Description: The issue allows unauthenticated remote attackers to exploit a Path Traversal vulnerability, enabling them to read arbitrary system files. This can lead to unauthorized file access. Recommendations:...
PT-2024-16902 · Trcore · Trcore Dvc
Name of the Vulnerable Software and Affected Versions: TRCore DVC affected versions not specified Description: The issue concerns a Path Traversal vulnerability in the DVC from TRCore, which also fails to restrict the types of files that can be uploaded. This vulnerability allows unauthenticated...
PT-2024-16905 · Trcore · Trcore Dvc
Name of the Vulnerable Software and Affected Versions: TRCore DVC versions up to 6.3 Description: The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory,...
dvc.gov.in Improper Access Control vulnerability OBB-3849779
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-24610
Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...
CVE-2022-24610
Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...
CVE-2022-24610
CVE-2022-24610 concerns the Alecto DVC-215IP camera (firmware 63.1.1.173 and earlier). The issue is an information disclosure: the Wi‑Fi passphrase is hidden in Settings, but manipulating the style/DOM of the password field reveals the password, enabling access to the camera’s internal network. T...
CVE-2022-24610
Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...