Design/Logic Flaw

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

Cross site scripting

Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...

CVE-2015-7914

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...

CVE-2015-7915

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-7914

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...

CVE-2015-7915

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-7916

Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...

CVE-2015-7914

The CVE-2015-7914 vulnerability affects Sauter moduWeb Vision (EY-WS505F0x0) before firmware version 1.6.0. It allows remote attackers to bypass authentication by abusing knowledge of a password hash without the actual password, enabling unauthorized access. The issue stems from insecure credenti...

CVE-2015-7916

The CVE-2015-7916 vulnerability affects Sauter moduWeb Vision (EY-WS505F0x0) prior to firmware 1.6.0, enabling remote exploitation of a cross-site scripting (XSS) flaw in the web interface. ICSA-16-033-01 notes remote exploitability and that public exploits are not known for this CVE, with Sauter...

CVE-2015-7915

CVE-2015-7915 affects Sauter moduWeb Vision (EY-WS505F0x0) prior to firmware 1.6.0. The vulnerability involves cleartext transmission of credentials, enabling remote attackers to obtain sensitive information by sniffing network traffic. The ICSA/CISA advisory notes remote exploitation potential a...

PT-2016-1222

Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted query. This is due to the la...

PT-2016-1224

Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0 Description The issue is related to errors in security settings, allowing remote attackers to bypass authentication by leveraging knowledge of a password hash without knowing the associated passwor...

CVE-2015-7916: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...

PT-2016-1223

Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0 Description The issue is related to the transmission of data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. This is due to a web server...

CVE-2015-7914: Improper Authentication

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...

CVE-2015-7915: Exposure of Sensitive Information to an Unauthorized Actor

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2016-3455

Name of the Vulnerable Software and Affected Versions OpenCV versions 3.0.0 through 3.3.0 Description The issue is related to a double free problem in the OpenCV library, which can be exploited by attackers to execute arbitrary code, allowing them to access confidential data, disrupt its integrit...

Network Vision IntraVue Code Injection Vulnerability

OVERVIEW Researcher Jürgen Bilberger from Daimler TSS GmbH has identified a code injection vulnerability in Network Vision’s IntraVue software. Network Vision has produced a new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...

Security IP Camera Star Vision DVR - Authentication Bypass

Exploit Title: Security IP Camera Star Vision DVR Authentication Bypass Date: 2015-08-13 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: Version: All Versions Exploit : 1 - First, open your Chrome browser 2 - Enter the IP address or domain to see the logi...

Security IP Camera Star Vision DVR - Authentication Bypass

Security IP Camera Star Vision DVR - Authentication Bypass Exploit Title: Security IP Camera Star Vision DVR Authentication Bypass Date: 2015-08-13 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: Version: All Versions Exploit : 1 - First, open your Chrome...