CVE-2026-103567: Buffer Over-read

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-105722: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

PT-2026-111960

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A buffer over-read exists in the Windows Broadcast DVR User Service. This issue allows an authorized attacker to disclose sensitive information locally, which may...

PT-2026-111956

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112023

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use after free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use after free is a memory...

PT-2026-111959

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

CVE-2026-102197: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

PT-2026-111908

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

CVE-2026-102196: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102193: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85938: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70148: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

TBK DVR Auth Bypass (CVE-2018-9995)

Exploits CVE-2018-9995 in TBK/rebranded DVRs: Cookie uid=admin bypasses auth and /device.rsp?opt=user&cmd=list returns all user credentials in JSON. !/usr/bin/env python3 -- coding: utf-8 -- """TBK DVR cookie auth bypass credential leak CVE-2018-9995.""" import json from kittysploit import from...

TVT DVR Device Info Disclosure (CVE-2024-7339)

Exploits CVE-2024-7339 in TVT/Provision-ISR/AVISION DVRs: unauthenticated POST /queryDevInfo leaks firmware, network, and device metadata. !/usr/bin/env python3 -- coding: utf-8 -- """TVT DVR queryDevInfo disclosure CVE-2024-7339.""" from kittysploit import from lib.protocols.http.httpclient impo...

Visual Tools DVR Shellshock RCE (CVE-2021-42071)

Exploits CVE-2021-42071 in Visual Tools DVR VX16: Shellshock in User-Agent on /cgi-bin/slogin/login.py yields unauthenticated command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Tools DVR Shellshock RCE CVE-2021-42071.""" import re from kittysploit import from...

CVE-2018-9995-EXPLOIT

CVE-2018-9995 - DVR認証バイパス このリポジトリは、CVE-2018-9995として識別されるセキュリティ脆弱性に対処するものです。この脆弱性は、TBK DVR4104、DVR4216、Novo、CeNova、QSee、Pulnix、XVR 5 in 1、Securus、Night OWL、DVR Login、HVR Login、MDVR Loginなど、さまざまなDVRデバイスに影響を及ぼします。これらのデバイスは、元のTBK...

CVE-2026-66372

CVE-2026-66372 affects the Digital Watchdog VMAX DVR and NVR product lineups. The root cause is a predictable seed in the pseudo-random number generator (PRNG) , resulting in insufficiently random values that make web session tokens predictable and bound their entropy to the seed space. The CVSS ...

CVE-2026-66372 Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...

CVE-2026-66887 Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products are missing authorization on state-changing CGIs and session checks are not performed...

CVE-2026-66887

Digital Watchdog VMAX DVR and NVR devices are vulnerable due to missing authorization on state-changing CGI endpoints and the absence of session checks , allowing an attacker on the adjacent network to modify device state without authentication. CISA ICS-CERT rated this CRITICAL (CVSS 3.1: 9.6 / ...