Ispyconnect

Ispyconnect develops a narrow but prominent portfolio of video-surveillance and remote-access applications, Agent DVR and ispy, that operate across networked deployments and require local or remote administrative access. Vulnerabilities affecting the vendor skew strongly toward critical severity and frequently acquire public exploit code, clustering around structural weaknesses in authentication, input validation, and command handling—including path traversal, code injection, OS command injection, and server-side request forgery—that reflect the trust boundaries and external input surfaces inherent to agent-based monitoring software. Defenders should prioritize patching instances of these products, particularly where they are internet-exposed or hold administrative credentials; live exploitation and severity counts are shown alongside this summary.