CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

GeoVision ASManager 安全漏洞

GeoVision ASManager GV-ASManager is an access control system developed by the Chinese company GeoVision. A credential disclosure vulnerability exists in the GeoVision ASManager Windows Application due to improper memory handling in the ASManagerService.exe process. An attacker can exploit this...

CVE-2025-26263

CVE-2025-26263 affects GeoVision ASManager Windows desktop application (GV-ASManager)

CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...

CVE-2025-26264

Geovision GV-ASWeb (ASManager) versions 6.1.2.0 or earlier are affected by a Remote Code Execution (RCE) vulnerability in the Notification Settings feature. An authenticated attacker with System Settings privileges can exploit this flaw to run arbitrary commands on the server, potentially leading...

Geovision GV-ASWeb 代码注入漏洞

Geovision GV-ASWeb is a Web-based software from Geovision China for remote access and configuration of GV-ASManager's database. A code injection vulnerability exists in Geovision GV-ASWeb, which can be exploited by an attacker to execute arbitrary commands on the system...

CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...

CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...

Exploit for CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb with the ve...

CVE-2024-56903

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack...

CVE-2024-56901

A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers to arbitrarily create Administrator accounts via a crafted GET request method. This vulnerability is used in chain with CVE-2024-56903 for a successful CSRF...

CVE-2024-56902

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56902

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password...

CVE-2024-56903

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56901

A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers to arbitrarily create Administrator accounts via a crafted GET request method. This vulnerability is used in chain with CVE-2024-56903 for a successful CSRF...

Geovision GV-ASWeb 安全漏洞

Geovision GV-ASWeb is a web-based software from Geovision China that is used to remotely access and configure the GV-ASManager's database. A security vulnerability exists in Geovision GV-ASWeb version 6.1.1.0 and earlier, which stems from the presence of cross-site request forgery CSRF, which...