Samsung DVR Authentication Bypass

The remote Samsung DVR is prone to an Authentication Bypass. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samsung DVR Authentication Bypass

Title: Samsung DVR authentication bypass Version affected: firmware version = 1.10 Vendor: Samsung - www.samsung-security.com Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched Samsung provides a wide range of DVR...

Multiple DVR HTTP Server Directory Traversal Vulnerability - Active Check

The thttpd running on the remote DVR is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

PT-2013-62: Internal Network Resources Access in Web Viewer for Samsung DVR

The specialists of the Positive Research center have detected "Internal Network Resources Access" vulnerability in Web Viewer for Samsung DVR. The vulnerability allows attackers to get unauthorized access to view and control the cameras via unsafe cookies parsing. If an attacker sends the request...

PT-2013-61: Disclosure of sensitive information in Web Viewer for Samsung DVR

The specialists of the Positive Research center have detected "Disclosure of sensitive information" vulnerability associated with Absence of Password Hashing in Web Viewer for Samsung DVR. Users credentials logins and passwords are stored in plaintext at pages, not hashed or encrypted. This...

Hunt CCTV DVR.cfg Direct Request Information Disclosure

The remote web server appears to be part of a digital video recorder DVR, such as models of Hunt CCTV, that is affected by an information disclosure vulnerability. Specifically, an unauthenticated remote attacker can retrieve the device's configuration file, 'DVR.cfg', which contains sensitive...

Multiple DVR Information Disclosure Vulnerability

Multiple DVR devices are prone to a remote information- disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information, such as credentials, that may aid in further attacks from SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted...

Multiple DVR Manufacturers Configuration Disclosure

This module takes advantage of an authentication bypass vulnerability at the web interface of multiple manufacturers DVR systems, which allows to retrieve the device configuration. This module requires Metasploit: https://metasploit.com/download Current source:...

Ray Sharp DVR Password Retriever

This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems. It is possible to retrieve the username and password through the TCP service running on port 9000. Other brands using this platform and exposing the same issue may include Swann, Lorex, Night Owl, Zmodo,...

H.264 DVR Camera Remote File Discolure Vulnerability

Exploit for hardware platform in category web applications This is private exploit. You can buy it at https://0day.today...

Visual Tools DVR multiple vulnerabilities

Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Status: unpatched Visual Tools develops, manufactures a...

Visual Tools DVR Command Injection / Password Disclosure

Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Status: unpatched Visual Tools develops, manufactures a...

CCTV DVR Login Scanning Utility

This module tests for standalone CCTV DVR video surveillance deployments specifically by MicroDigital, HIVISION, CTRing, and numerous other rebranded devices that are utilizing default vendor passwords. Additionally, this module has the ability to brute force user accounts. Such CCTV DVR video...

Microsoft Windows Media memory corruption

Memory corruption on .dvr-ms files parsing...

Microsoft Windows Media Player和Media Center ".dvr-ms"远程代码执行漏洞(MS11-092)

BUGTRAQ ID: 50957 CVE ID: CVE-2011-3401 MediaPlayer是一个全功能的网络多媒体播放软件。Media Center是多媒体中心应用程序。 Microsoft Windows Media Player和Windows Media Center处理特制.dvr-ms文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 临时解决方法： 限制访问管理员组的ENCDEC.DLL...

Microsoft Windows Media Remote Code Execution Vulnerability (2648048)

This host is missing a critical security update according to Microsoft Bulletin MS11-092. OpenVAS Vulnerability Test $Id: secpodms11-092.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Media Remote Code Execution Vulnerability 2648048 Authors: Sooraj KS Copyright: Copyright c 2011...

Microsoft Windows Media Player DVR-MS Memory Corruption (MS11-092; CVE-2011-3401)

A remote code execution vulnerability has been reported in Windows Media Player and Windows Media Center. The vulnerability is caused due to a memory corruption condition while parsing specially crafted DVR-MS media files. A remote attacker could trigger this issue by enticing an unsuspecting use...

Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities

Document Title: =============== Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 227 Abstract Advisory Information: ============================== Vulnerability Lab Team...

GeoVision DVR Remote View - Multiple Web Vulnerabilities

Document Title: =============== GeoVision DVR Remote View - Multiple Web Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 51 Product & Service Introduction: =============================== Geovision is a very famous...

Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities

Document Title: =============== Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 227 Abstract Advisory Information: ============================== Vulnerability Lab Team...