EUVD-2020-5371

Malware in sbrugna...

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

Authorization

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

Unrestricted file upload

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

CVE-2024-22515

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...

CVE-2024-22514

Summary: CVE-2024-22514 affects iSpyConnect.com Agent DVR 5.1.6.0, where restoring a crafted backup file enables arbitrary file execution (RCE) via manipulation of backup/restore handling, including edits to objects.xml to trigger commands with the program’s privileges. Related documents (exploit...

CVE-2024-22515

CVE-2024-22515 affects iSpyConnect Agent DVR 5.1.6.0 with an unrestricted file-upload in the audio upload component. Root cause per sources is lack of verification of the uploaded file type, enabling arbitrary file uploads. This vulnerability can lead to high impact on confidentiality, integrity,...

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

iSpyConnect.com Agent DVR Security Vulnerability

iSpyConnect.com Agent DVR is a cross-platform video surveillance software. A security vulnerability exists in iSpyConnect.com Agent DVR version 5.1.6.0. An attacker can exploit the vulnerability to run arbitrary files by restoring a specially crafted backup file...

CVE-2020-13093

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

Directory traversal

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

CVE-2020-13093

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

CVE-2020-13093

CVE-2020-13093 affects iSpyConnect.com Agent DVR, prior to version 2.7.1.0, exposing a path traversal vulnerability. The root cause is described as improper filtering of special path elements, enabling access to locations outside of a restricted directory. Impact details in the sources indicate p...