CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

CVE-2026-55863 motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution

motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post method in motioneye/handlers/action.py lacks the BaseHandler.auth decorator, allowing an unauthenticated remote...

CVE-2026-51134

The C-MOR Video Surveillance web interface by za-internet GmbH (versions up to 6.0104 ) is vulnerable to unauthenticated path traversal in the cam parameter of show-movies.pml . Attackers can read arbitrary system files (demonstrated against /etc/passwd) by injecting encoded ../ sequences. The vu...

CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

EUVD-2026-79998

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

EUVD-2026-79997

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

CVE-2026-51133

CVE-2026-51133 is a Cross-Site Scripting (XSS) vulnerability in za-internet GmbH C-MOR Video Surveillance versions 6.0104 and below . The flaw exists in the ptzpreset.pml component (via the size parameter) and the show-movies.pml component (via an arbitrary parameter), allowing a remote attacker ...

cam-hunter

📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...

CVE-2026-61390

There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets...

CP Plus CP Series 跨站脚本漏洞

The CP Plus CP Series is a series of video surveillance and security device products developed by CP Plus Company. The CP Plus CP Series contains a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning in certain functional modules, allowing attackers to...

CVE-2025-69986

A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32. The application fails to validate the length of the Protocol parameter inside the Transport element. By sending a specially crafted SOAP request containing an oversized protocol string, an...

Rapidvms 安全漏洞

Rapidvms is a video surveillance management system developed by linkingvision. There were security vulnerabilities in versions prior to Rapidvms PR96, and these vulnerabilities stemmed from improper restrictions on memory buffer operations...

Rapidvms 安全漏洞

Rapidvms is a video surveillance management system developed by linkingvision. There were security vulnerabilities in versions prior to Rapidvms PR96, and these vulnerabilities stemmed from improper restrictions on memory buffer operations...

CVE-2026-3797

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLSRESTFile.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be...

CVE-2026-3797

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLSRESTFile.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be...

CVE-2026-3797

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLSRESTFile.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be...

CVE-2026-3797 Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLSRESTFile.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be...

CVE-2026-3797

Tiandy Video Surveillance System 7.17.0 is affected by a vulnerability in CLS_REST_File.java uploadFile where manipulating the fileName argument enables unrestricted file upload. The issue can be triggered remotely and public exploits are disclosed. Connected sources confirm the affected componen...

CVE-2026-3797 Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLSRESTFile.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be...

PT-2026-24005

Name of the Vulnerable Software and Affected Versions Tiandy Video Surveillance System version 7.17.0 Description A security issue exists in Tiandy Video Surveillance System that allows for unrestricted file uploads. This is due to the manipulation of the fileName argument within the uploadFile...