EV Live Assistant suffers from dll hijacking vulnerability

Ev Live Streaming Assistant is an unmanned live streaming software. EV Live Assistant suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file and gain control of the server...

EV Recording Win suffers from dll hijacking vulnerability

EV Recording is a computer screen recording software. EV Record Screen Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

EV Screen Sharing Win suffers from dll hijacking vulnerability

EV Screen Sharing is a screen sharing program. EV Screen Sharing Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

ev-d.de Cross Site Scripting vulnerability OBB-1354188

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

lemonaid-charitea-ev.org Cross Site Scripting vulnerability OBB-1193776

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-1623

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...

ev-installs.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1106956 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ev-installs.com websi...

SQL injection vulnerability in Zoneminder ev***.php file

Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder ev.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Remotely controlled EV home chargers – the threats and vulnerabilities

We are now seeing signs of a possible shift in the field of personal transport. Recent events such as the 'dieselgate' scandal undermine customer and government confidence in combustion engines and their environmental safety. At the same time there has been a big step forward in the development o...

Clooud 1.4.0 Shell Upload

======================================================================================================= | Title : Clooud v1.4.0 - Premium Media Sharing Script unrestricted file upload Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais...

Swamp 0.0.2 Remote File Inclusion

======================================================================== | Title : Swamp v0.0.2 File inclusion vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 10 FranASSais V.Pro | Version : v0.0.2 | Vendor : https://github.com/wcchandler/swamp | Dork :...

Multiple PHP Webservers Ransomware Upload

A file upload vulnerability exists in various PHP webservers. Successful exploitation of this vulnerability could allow a remote attacker to execute PHP Ransomware code on the compromised server. This method is often used by ransomware such as EV, Lalabitch, JapanLocker, CTB-Locker and others...

Cuvva: Subdomain take over oh-no.cuvva.co and ohno.cuvva.co

Cuvva has an old EV certificate which lists a very large number of subject alternative names SANs, as listed below. These were included because we anticipated potentially wanting to use these hostnames in the future and it was free to add them. Very few of the hostnames actually exist, and those...

Eview EV-07S GPS Tracker Security Bypass Vulnerability

The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A security vulnerability exists in the phone number of the Eview EV-07S GPS Tracker, which originates from a lack of authentication in the program. The vulnerability can be exploited to restore the...

Eview EV-07S GPS Tracker Information Disclosure Vulnerability

The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A security vulnerability exists in the Eview EV-07S GPS Tracker. The vulnerability can be exploited by an attacker to obtain sensitive information GPS data, etc...

Eview EV-07S GPS Buffer Overflow Vulnerability

The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A buffer overflow vulnerability exists in the Eview EV-07S GPS Tracker, which arises from the program failing to perform sufficient boundary checks. An attacker can exploit the vulnerability by...

CVE-2017-5237

Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"...

Default configuration

Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"...

Information disclosure

Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle MitM listener...

CVE-2017-5238

Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one variable to another, overwriting the data of another field...