Directory traversal

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

CVE-2009-5087

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

GeoVision DVR Remote View - Multiple Web Vulnerabilities

Document Title: =============== GeoVision DVR Remote View - Multiple Web Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 51 Product & Service Introduction: =============================== Geovision is a very famous...

GeoVision DVR Remote View - Multiple Web Vulnerabilities

Document Title: =============== GeoVision DVR Remote View - Multiple Web Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 51 Product & Service Introduction: =============================== Geovision is a very famous...

CVE-2009-5087

CVE-2009-5087 refers to a directory traversal vulnerability in Geovision Digital Video Surveillance System 8.2, affecting the geohttpserver component. The issue allows remote attackers to read arbitrary files via a .. (dot-dot) in a GET request. The primary affected product is Geovision’s DVSS 8....

CVE-2009-5087

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

GeoHttpServer - Remote Denial of Service

GeoHttpServer - Remote Denial of Service !/usr/bin/perl Exploit Title: GeoHttpServer remote DoS Date: 7-5-2010 Author: aviho1 vendor: GeoVision Version: all info: the password recovery page does not properly validate user-supplied password ,causing a dos. use IO::Socket; my $host = shift ||...

GeoHttpServer Remote DoS Vulnerability

Exploit for windows platform in category dos / poc ====================================== GeoHttpServer Remote DoS Vulnerability ====================================== !/usr/bin/perl Exploit Title: GeoHttpServer remote DoS Date: 7-5-2010 Author: aviho1 vendor: GeoVision Version: all info: the...

GeoHttpServer - Remote Denial of Service

!/usr/bin/perl Exploit Title: GeoHttpServer remote DoS Date: 7-5-2010 Author: aviho1 vendor: GeoVision Version: all info: the password recovery page does not properly validate user-supplied password ,causing a dos. use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

Design/Logic Flaw

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

The CVE-2009-1092 entry describes a use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control (LIVEAU~1.OCX 7.0) used by GeoVision DVR systems. The flaw allows remote code execution when an attacker calls GetAudioPlayingTime with certain arguments, enabling arbitrary code exec...

GeoVision LiveAudio ActiveX控件GetAudioPlayingTime()方式代码执行漏洞

BUGTRAQ ID: 34115 GeoVision LiveAudio ActiveX控件是GeoVision监控软件中用于同步音频的工具。 GeoVision LiveAudio ActiveX控件（CLSID：814A3C52-B6F7-4AEA-A9BC-7849B9B0ECA8，Progid：LIVEAUDIO.LiveAudioCtrl.1）没有正确地验证对GetAudioPlayingTime方式所提供的输入参数。如果用户受骗访问了恶意网页的话，就可能导致访问已经释放的内存。成功利用这个漏洞的攻击者可以在用户系统上执行任意代码。 GeoVision LiveAudio...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

No description provided by source. !-- 02/03/2009 14.57.46 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime remote freed-memory access exploit IE7 by Nine:Situations:Group::trotzkista vendor site: http://www.geovision.com.tw/ our site: http://retrogod.altervista.org/ details: CLSID:...

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

GeoVision LiveAudio Memory Access

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

Exploit for unknown platform in category remote exploits ============================================================== GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit ==============================================================...

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...