Lucene search
+L

852 matches found

RedhatCVE
RedhatCVE
added 2025/11/21 7:37 p.m.10 views

CVE-2025-63408

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request SSRF, or execute OS commands...

7.8CVSS7.1AI score0.00395EPSS
SaveExploits2References1
CVE
CVE
added 2025/11/18 12:00 a.m.30 views

CVE-2025-63408

CVE-2025-63408 affects Local Agent DVR up to version 6.6.1.0. The vulnerability is a directory traversal that enables an unauthenticated local attacker to: (1) access sensitive information, (2) trigger a server-side forgery request (SSRF), and (3) execute operating system commands. The available ...

7.8CVSS6.8AI score0.00395EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/18 12:00 a.m.10 views

PT-2025-47326

Name of the Vulnerable Software and Affected Versions Local Agent DVR versions through 6.6.1.0 Description Local Agent DVR is affected by a directory traversal issue. An unauthenticated local attacker can exploit this to access sensitive information, conduct a server-side forgery request SSRF, or...

7.8CVSS6.9AI score0.00395EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2025/11/18 12:00 a.m.16 views

CVE-2025-63408

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request SSRF, or execute OS commands...

0.00395EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.13 views

iSpy Agent DVR 安全漏洞

iSpy Agent DVR is an advanced video surveillance software from iSpy. A security vulnerability exists in iSpy Agent DVR version 6.6.1.0 and prior versions, which stems from a directory traversal issue that could lead to the disclosure of sensitive information and server-side request forgery...

7.8CVSS6.2AI score0.00395EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2025/11/18 12:00 a.m.5 views

CVE-2025-63408

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request SSRF, or execute OS commands...

6.8AI score0.00395EPSS
SaveExploits2References2
OSV
OSV
added 2025/11/11 6:15 p.m.7 views

CVE-2025-59515

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00327EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/11 5:59 p.m.35 views

CVE-2025-60717

CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...

7CVSS5.5AI score0.00327EPSS
SaveExploits0References1Affected Software9
CVE
CVE
added 2025/11/11 5:59 p.m.36 views

CVE-2025-59515

CVE-2025-59515 is a use-after-free vulnerability in Windows Broadcast DVR User Service that enables local privilege escalation for an authorized attacker. The NVD/NCSC entries confirm the impact as elevated rights locally, with CVSS v3.1 base score 7.0 (HIGH) and LOCAL/LOW privileges required, no...

7CVSS5.5AI score0.00327EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
added 2025/11/11 5:59 p.m.16 views

CVE-2025-59515 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

...

7CVSS0.00327EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/11/11 8:00 a.m.11 views

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00327EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2025/10/13 10:12 a.m.11 views

Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors

Malware campaigns distributing the RondoDox botnet have expanded their targeting focus to exploit more than 50 vulnerabilities across over 30 vendors. The activity, described as akin to an "exploit shotgun" approach, has singled out a wide range of internet-exposed infrastructure, including...

8.8CVSS6.9AI score0.99999EPSS
SaveExploits7
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2013-3548

Malware in sbrugna...

9.3CVSS6.1AI score0.07009EPSS
SaveExploits4References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-28191

Malware in sbrugna...

5.3CVSS5.3AI score0.01103EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-2966

Malware in sbrugna...

8.8CVSS6.6AI score0.00824EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2013-3549

Malware in sbrugna...

7.8CVSS6.1AI score0.07655EPSS
SaveExploits4References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2013-7245

Malware in sbrugna...

9.8CVSS9.2AI score0.02719EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2020-4022

Malware in sbrugna...

6.5CVSS6.5AI score0.01166EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2008-4361

Malware in sbrugna...

7.8CVSS6.4AI score0.03732EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-4024

Malware in sbrugna...

6.5CVSS6.5AI score0.00644EPSS
SaveExploits2References5
Rows per page
Query Builder