NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#nvr

0 stories this week · 1 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedcrystal-server1 file-upload1 nuuo1 unauthenticated1

2 stories, newest first · one card per story

Full Disclosure13d agohigh

NUUO Crystal Server 3.19.0.85 allows unauthenticated PHP upload to RCE

Uploaded PHP can execute through FastCGI as the web service account, rated 9.8 Critical.

nuuo crystal-server

1

CISA AdvisoriesSep 15, 2026high

Digital Watchdog VMAX DVR and NVR Product Lineups

CISA advisory details six flaws, aggregate CVSS 9.6, giving attackers full control of Digital Watchdog VMAX DVR/NVR surveillance devices.

7 min readauthentication-bypass cisa

2