SQL Injection Vulnerability in the Video Management Platform of Zhejiang YUV Technology Co.

uniview, a global provider of AIoT products, solutions and full-stack capabilities. A SQL injection vulnerability exists in the video management platform of Zhejiang Uniview Technology Co. Ltd, which can be exploited by an attacker to obtain sensitive information from the database...

Intelligent Security System SecurOS Enterprise 11 Unquoted Service Path

Exploit Title: Intelligent Security System SecurOS Enterprise v11 - Unquoted Service Path Date: 2024-11-25 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] t.me/Ci3c0 Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Vend...

Siemens SiNVR 3 Cross-Site Scripting Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a reflected cross-site scripting vulnerability in its implementation, which can be exploited by remote attackers to obtain sensitive data or perform...

Siemens SiNVR 3 Weak Password Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a weak password vulnerability in its implementation that can be exploited by a remote attacker to read and decrypt passwords...

Siemens SiNVR 3 Plain Text Save File Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 stores login credentials in plain text in a log file. An information disclosure vulnerability exists in the implementation, which can be exploited by a...

Zhejiang Yusi industry general video management platform file upload vulnerability

Video surveillance management platform is a set of industry general video management platform developed by Zhejiang YUVAD. A file upload vulnerability exists in Zhejiang YUVAD's industry general video management platform. An attacker can use the vulnerability to upload a webshell and gain server...

Intelligent Security System SecurOS Enterprise 10.2 - SecurosCtrlService Unquoted Service Path

Intelligent Security System SecurOS Enterprise 10.2 - SecurosCtrlService Unquoted Service Path Exploit Title: Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path Discovery Date: 2019-10-28 Exploit Author: Alberto Vargas Vendor Homepage:...