lorextechnology.com XSS vulnerability

Open Bug Bounty ID: OBB-635925 Description| Value ---|--- Affected Website:| lorextechnology.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lorextechnology.com XSS vulnerability

Open Bug Bounty ID: OBB-606875 Description| Value ---|--- Affected Website:| lorextechnology.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Multiple IoT Vendors – Multiple Vulnerabilities

Vulnerabilities summary The following advisory describes three 3 vulnerabilities found in the following vendors: Lorex StarVedia Eminent Kraun The vulnerabilities found: Hard-coded credentials Remote command injection 2 It is possible to chain the vulnerabilities and to achieve unauthenticated...

Lorex LH300 Series - ActiveX Buffer Overflow (PoC) Exploit

Exploit for hardware platform in category dos / poc Buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex Technologies, a major video surveillance manufacturer that is very popular in the...

Lorex ECO DVR LH162400 Firmware Security Bypass Vulnerability

Lorex ECO DVR LH162400 is a digital video recorder product from Lorex USA. A security bypass vulnerability exists in the Lorex ECO DVR LH162400 using firmware version 5.2.0-20141008. An attacker can exploit this vulnerability to bypass the authentication mechanism and gain access to the affected...

Lorex ECO DVR Backdoor Account

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 1. ADVISORY INFORMATION ======================= Product: Lorex ECO DVR Vendor URL: https://www.lorextechnology.com/ Type: Hard coded password CWE-259 Date found: 2016-05-04 Date published: 2016-05-30 CVE: - 2. CREDITS ========== This vulnerability w...

Lorex LH300 Series - ActiveX Buffer Overflow (PoC)

Lorex LH300 Series - ActiveX Buffer Overflow PoC Disclosure: 09/01/2014 / Last updated: 18/01/2015 Hi, I have discovered a buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex...

Lorex LH300 Series - ActiveX Buffer Overflow (PoC)

Disclosure: 09/01/2014 / Last updated: 18/01/2015 Hi, I have discovered a buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex Technologies, a major video surveillance manufacturer that ...

Lorex Technologies Edge Series Security DVR ActiveX Buffer Overflow

The remote Windows host has one or more versions of Lorex Technologies' INetViewX ActiveX control installed. The HTTPPORT parameter in these controls is affected by a buffer overflow vulnerability that could allow an attacker to remotely execute arbitrary code if exploited. C Tenable Network...

CVE-2014-1201

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-331D97A, and Edge3 LH340 series with firmware 11.19.851FE3A allows remote attackers to cause a denial of service crash and possibl...

Buffer overflow

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-331D97A, and Edge3 LH340 series with firmware 11.19.851FE3A allows remote attackers to cause a denial of service crash and possibl...

CVE-2014-1201

CVE-2014-1201 is a buffer overflow in Lorex INetViewX ActiveX control used by Lorex Edge LH310/LH320 (firmware 7-35-28-1B26E), Edge2 LH330 (11.17.38-33_1D97A), and Edge3 LH340 (11.19.85_1FE3A). The flaw allows remote attackers to crash the control or potentially execute arbitrary code via a long ...

CVE-2014-1201

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-331D97A, and Edge3 LH340 series with firmware 11.19.851FE3A allows remote attackers to cause a denial of service crash and possibl...

[CVE -2014-1201] Lorex security DVR ActiveX control buffer overflow

Hi, I have discovered a buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex Technologies, a major video surveillance manufacturer that is very popular in the US and East Asia. Their...

Lorex DVR ActiveX buffer overflow

INetViewX control buffer overflow...

Lorex IP cameras authenticaiton bypass

It's possible to access camera without authentication...

CVE-2012-6451 Authentication Bypass in LOREX IP Cameras

Product: Lorex LNC116 and LNC104 IP Cameras Vendor: LOREX Technology Inc. Vulnerability Type: Authentication Bypass Vulnerable Firmware Versions: 030312 and earlier Tested Firmware Version: 030312 Fixed Firmware Version: 030405 Solution Status: Fixed by Vendor Vendor Notification: December 22, 20...

Lorex LNC116 / LNC104 IP Camera Authentication Bypass Vulnerability

Lorex LNC116 and LNC104 IP cameras only perform basic authentication on the main login page. If you perform direct browsing to any other interface, you are not forcibly authenticated. Product: Lorex LNC116 and LNC104 IP Cameras Vendor: LOREX Technology Inc. Vulnerability Type: Authentication Bypa...

Lorex LNC116 / LNC104 IP Camera Authentication Bypass

Product: Lorex LNC116 and LNC104 IP Cameras Vendor: LOREX Technology Inc. Vulnerability Type: Authentication Bypass Vulnerable Firmware Versions: 030312 and earlier Tested Firmware Version: 030312 Fixed Firmware Version: 030405 Solution Status: Fixed by Vendor Vendor Notification: December 22, 20...

Ray Sharp DVR Password Retriever

This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems. It is possible to retrieve the username and password through the TCP service running on port 9000. Other brands using this platform and exposing the same issue may include Swann, Lorex, Night Owl, Zmodo,...