EUVD-2024-38912

Malicious code in bioql PyPI...

CVE-2024-41886

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...

CVE-2024-41887

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt files in the directory. The manufacturer has released patch firmware for the...

CVE-2024-41882

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The manufacturer has released patch firmware for the flaw, please refer...

CVE-2024-41882 Stack based buffer overflow

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The manufacturer has released patch firmware for the flaw, please refer...

CVE-2024-41882

CVE-2024-41882 describes a remote code execution on an NVR due to a stack overflow triggered by oversized URL parameters. Affected component is the NVR firmware, with the root cause tied to input handling in URL parameters. The vulnerability can enable an attacker to reboot the device or potentia...

CVE-2024-41886 Improper Input Validation

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...

CVE-2023-6116

Hanwha Vision NVR/DVR remote code execution (CVE-2023-6116) arises from a flaw that allows arbitrary code execution by injecting code into HTTP request parameters. The vulnerability affects Hanwha Vision network video recorders (NVRs) and digital video recorders (DVRs) where the base address of s...