Vulnerabilities

TI-2025-39301 CVE-2025-63408 · GHSA-prw8-xqmj-467g

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows…

HIGH 69

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00427 Published 2025-11-18 No fix listed CWE-78

TI-2024-15046 CVE-2024-22515 · GHSA-qwgv-vj4f-32vw

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows…

HIGH 73

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01208 Published 2024-02-06 No fix listed CWE-434

TI-2024-15045 CVE-2024-22514 · GHSA-89x3-jgxj-39cx

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run…

HIGH 73

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01401 Published 2024-02-06 No fix listed CWE-94

TI-2022-12143 CVE-2022-29774 · GHSA-5cwm-c484-hv45

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.

MEDIUM 51

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05576 Published 2022-06-21 No fix listed CWE-22

TI-2022-12144 CVE-2022-29775 · GHSA-jf8x-8gq4-qcg2

iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.

HIGH 77

iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.61034 Published 2022-06-21 No fix listed CWE-287

TI-2020-10298 CVE-2020-13093 · GHSA-6x34-4pjh-4442

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.

LOW 27

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01284 Published 2020-05-15 No fix listed CWE-22

Vulnerabilities

Filters

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows…

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows…

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run…

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.

iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.