Lucene search
K

55 matches found

Nuclei
Nuclei
added 3 days ago182 views

TVT NVMS 1000 - Local File Inclusion

TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. id: CVE-2019-20085 info: name: TVT NVMS 1000 - Local File Inclusion author: daffainfo severity: high description: | TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. impact: | An attacker can exploit this...

7.5CVSS7.1AI score0.93975EPSS
Exploits6References5
Nuclei
Nuclei
added 3 days ago66 views

TVT DVR Sensitive Device - Information Disclosure

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. id: CVE-2024-7339...

6.9CVSS5.1AI score0.90307EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2026/01/09 10:8 a.m.16 views

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal...

7.5CVSS6.9AI score0.93975EPSS
Exploits6References1
Cvelist
Cvelist
added 2025/11/24 8:30 p.m.9 views

CVE-2018-25126 TVT NVMS-9000 Hard-coded API Credentials & Command Injection

Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware used by many white-labeled DVR/NVR/IPC products contains hardcoded API credentials and an OS command injection flaw in its configuration services. The web/API interface accepts HTTP/XML requests authenticated with a fixed vendor...

9.3CVSS0.00544EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.2 views

TVT NVMS-9000 安全漏洞

The TVT NVMS-9000 is a digital video recorder from China-based Tongwei TVT. A security vulnerability exists in the TVT NVMS-9000 prior to version 1.3.4, which stems from an OS command injection flaw in the inclusion of hardcoded API credentials and configuration services, which could lead to...

9.3CVSS7.5AI score0.00544EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.4 views

TVT NVMS-9000 安全漏洞

The TVT NVMS-9000 is a digital video recorder from China-based Tongwei TVT. A security vulnerability exists in the TVT NVMS-9000 version prior to 1.3.4, which stems from an authentication bypass in the NVMS-9000 control protocol that could lead to the disclosure of sensitive information...

8.7CVSS6.5AI score0.00057EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-18965

Malicious code in bioql PyPI...

10CVSS6.5AI score0.1933EPSS
Exploits2References3
GithubExploit
GithubExploit
added 2025/08/20 7:37 a.m.219 views

Exploit for Improper Input Validation in Tvt Td-2108Ts-Cl_Firmware

CVE-2025-34036 - TVT DVR Simulation This repository contains...

10CVSS7.2AI score0.1933EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/06/26 3:12 a.m.9 views

CVE-2025-34036

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When th...

10CVSS8.1AI score0.1933EPSS
Exploits2References1
NVD
NVD
added 2025/06/24 1:15 a.m.4 views

CVE-2025-34036

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When th...

10CVSS0.1933EPSS
Exploits2References3
Cvelist
Cvelist
added 2025/06/24 1:0 a.m.10 views

CVE-2025-34036 Shenzhen TVT CCTV-DVR Command Injection

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When th...

10CVSS0.1933EPSS
Exploits2References3
CVE
CVE
added 2025/06/24 1:0 a.m.38 views

CVE-2025-34036

The CVE-2025-34036 issue affects white-labeled TVT DVRs’ Cross Web Server, a custom HTTP service listening on TCP ports 81/82. The web UI fails to sanitize the [lang] parameter in the /language/[lang]/index.html path, allowing unsafely used input in a tar extraction command to enable OS command i...

10CVSS7.7AI score0.1933EPSS
In wildExploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/24 1:0 a.m.2 views

CVE-2025-34036 Shenzhen TVT CCTV-DVR Command Injection

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When th...

10CVSS7.7AI score0.1933EPSS
Exploits2References3
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.3 views

TVT DVR 操作系统命令注入漏洞

TVT DVR is a video recorder from China-based Tongwei TVT. TVT DVR suffers from an OS command injection vulnerability, which stems from an un-cleaned language parameter in Cross Web Server that leads to an OS command injection attack...

10CVSS7.2AI score0.1933EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/06/24 12:0 a.m.2 views

PT-2025-26663

Name of the Vulnerable Software and Affected Versions: TVT DVR Cross Web Server affected versions not specified Description: An OS command injection issue exists in the custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in...

10CVSS7.5AI score0.1933EPSS
Exploits2References10
VulnCheck KEV
VulnCheck KEV
added 2025/06/23 12:0 a.m.0 views

VulnCheck KEV: CVE-2025-34036

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When...

10CVSS5.8AI score0.1933EPSS
Exploits2References1
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.445 views

TVT NVMS-1000 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TVT NVMS-1000 Directory Traversal', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability which exists in...

7.5CVSS7AI score0.93975EPSS
Exploits6
GithubExploit
GithubExploit
added 2024/08/05 4:26 p.m.524 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Provision-Isr Sh-4050A5-5L\(Mm\)_Firmware

CVE-2024-7339: Information Leak Vulnerability in DVR devices...

6.9CVSS5.1AI score0.90307EPSS
Exploits2
OSV
OSV
added 2024/08/01 4:15 a.m.1 views

CVE-2024-7339

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be...

5.3CVSS4.8AI score
Exploits0References4
NVD
NVD
added 2024/08/01 4:15 a.m.19 views

CVE-2024-7339

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be...

6.9CVSS0.90307EPSS
Exploits2References4
Rows per page
Query Builder