NUUO NVRmini 2 and NetGear ReadyNAS Surveillance OS Command Injection Vulnerability

NUUO NVRmini 2 is a network video recorder from NUUO.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution from NetGear that integrates video surveillance software, storage, switching and network management. An operating system command injection vulnerability exists in...

Multiple NUUO and NetGear Product Management Password Reset Vulnerability

NUUO NVRmini 2 is a network video recorder from NUUO.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution from NetGear that integrates video surveillance software, storage, switching and network management. An administrative password reset vulnerability exists in NUUO...

Information Disclosure Vulnerabilities in Multiple NUUO and NetGear Products

NUUO NVRmini 2 and NVRsolo are network video recorders.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution that integrates video surveillance software, storage, switching, and network management.NUUO Crystal is a Linux-based enterprise VMS Virtual Memory System NUUO...

NUUO NVRmini 2 and NetGear ReadyNAS Surveillance Buffer Overflow Vulnerability

NUUO NVRmini 2 is a network video recorder from NUUO.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution from NetGear that integrates video surveillance software, storage, switching and network management. A buffer overflow vulnerability exists in NUUO NVRmini 2 versio...

NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Unauthenticated Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Unauthenticated Remote Code Execution', 'Description' = %q The NVRmini 2 Network...

NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution', 'Description' = %q The NVRmini 2...

NUUO NVRmini 2 Remote Code Execution Vulnerability

NUUO provides a stable and high performance digital networked surveillance system. A remote code execution vulnerability exists in the NUUO NVRmini 2. An attacker can exploit the vulnerability to gain control of the target computer...

NUUO NVRmini 2 3.0.8 remote command execution

No description provided by source...

NUUO NVRmini 2 Local File Information Disclosure Vulnerability

NUUO provides a stable and high performance digital networked surveillance system. NUUO NVRmini 2 suffers from a local file information disclosure vulnerability when an improperly validated 'css' parameter is passed into the 'cssparser.php' script. An attacker can exploit this vulnerability to le...

NUUO NVRmini 2 Cross-Site Request Forgery Vulnerability

NUUO provides a stable and high performance digital networked surveillance system. NUUO NVRmini 2 Cross-Site Request Forgery Vulnerability. When a logged in user visits a malicious web site, an attacker can exploit this vulnerability to perform certain actions with administrative privileges...

NUUO NVRmini 2 3.0.8 - Remote Root Exploit

Exploit for php platform in category web applications !/usr/bin/env python NUUO Remote Root Exploit Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and easy,...

NUUO NVRmini 2 3.0.8 - 'strong_user.php' Backdoor Remote Shell Access

Exploit for php platform in category web applications NUUO Backdoor stronguser.php Remote Shell Access Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: fileD...

NUUO NVRmini 2 3.0.8 - Local File Disclosure

NUUO NVRmini 2 3.0.8 - Local File Disclosure NUUO Local File Disclosure Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and...

NUUO 3.0.8 Arbitrary File Deletion

i? NUUO Arbitrary File Deletion Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: ================================================================== Tested on: GNU/Linux 3.0.8 armv7l GNU/Linux 2.6.31.8 armv5tel lighttpd/1.4.28 PHP/5.5.3 Vulnerability discover...

NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications...

NUUO NVRmini 2 3.0.8 - Multiple OS Command Injection

Exploit for cgi platform in category web applications NUUO Multiple OS Command Injection Vulnerabilities Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040, NT-4040R DP: =04.07.0000.0030, =04.03.0000.0035 FW: =02.02.00, =1.7.0 Summary: NUUO NVRmini 2...

NUUO NVRmini 2 3.0.8 - strong_user.php Backdoor Remote Shell Access

NUUO NVRmini 2 3.0.8 - stronguser.php Backdoor Remote Shell Access NUUO Backdoor stronguser.php Remote Shell Access Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: fileData = file$file; $this-file = $file; else throw new Ex...

NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion

Exploit for php platform in category web applications NUUO Arbitrary File Deletion Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: ================================================================== Tested on: GNU/Linux 3.0.8 armv7l GNU/Linux 2.6.31.8 armv5t...

NUUO NVRmini 2 3.0.8 - Multiple OS Command Injections

NUUO NVRmini 2 3.0.8 - Multiple OS Command Injections NUUO Multiple OS Command Injection Vulnerabilities Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040, NT-4040R DP: =04.07.0000.0030, =04.03.0000.0035 FW: =02.02.00, =1.7.0 Summary: NUUO NVRmini 2...

NUUO NVRmini 2 3.0.8 - Remote Code Execution (Shellshock)

Exploit for cgi platform in category web applications NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: Firmware Version: 02.02.00 NVR Version: 02.02.0000.0040 Device Pack Version: 04.07.0000.0030 Summary: NUUO NVRmin...