Argus Surveillance DVR 4.0.0.0 - Privilege Escalation

/ Exploit Title: Argus Surveillance DVR 4.0.0.0 - Privilege Escalation Author: John Page aka hyp3rlinx Date: 2018-08-29 Vendor: Argus Surveillance DVR - 4.0.0.0 Software Link: http://www.argussurveillance.com/download/DVRstp.exe CVE: N/A Tested on: Windows 7 x86 Description: Argus Surveillance DV...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter...

Directory traversal

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter...

CVE-2018-15745

CVE-2018-15745 affects Argus Surveillance DVR 4.0.0.0. Unauthenticated directory traversal allows file disclosure via a ..%2F sequence in the WEBACCOUNT.CGI RESULTPAGE parameter, enabling an attacker to read sensitive server files. The NVD and related advisories confirm a local file inclusion/vec...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2018-15745: Improper Limitation of a Pathname to a Restricted Directory

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter...

PT-2018-13177

Name of the Vulnerable Software and Affected Versions Argus Surveillance DVR version 4.0.0.0 Description The issue allows unauthenticated directory traversal, resulting in file disclosure. This is achieved by using a ..%2F in the RESULTPAGE parameter of the "WEBACCOUNT.CGI" endpoint...

Argus Surveillance DVR 4.0.0.0 - Directory Traversal

Argus Surveillance DVR 4.0.0.0 - Directory Traversal Exploit: Argus Surveillance DVR 4.0.0.0 - Directory Traversal Author: John Page aka hyp3rlinx Date: 2018-08-28 Vendor: www.argussurveillance.com Software Link: http://www.argussurveillance.com/download/DVRstp.exe CVE: N/A Description: Argus...

Argus Surveillance DVR 4.0.0.0 Directory Traversal

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txt + ISR: Apparition Security Greetz: Greetz: indoushka | Eduardo | GGA Vendor...

Argus Surveillance DVR 4.0.0.0 Privilege Escalation Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com...

Argus Surveillance DVR Multiple Vulnerabilities

Argus Surveillance DVR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Argus Surveillance DVR 4.0.0.0 SYSTEM Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-SYSTEM-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo | GGA Vendor www.argussurveillance.com Product Argus...

Argus Surveillance DVR 4.0.0.0 Directory Traversal Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txt + ISR: Apparition Security Greetz: Greetz: indoushka | Eduardo | GGA Vendor...

Argus Surveillance DVR Detection

Detection of Argus Surveillance DVR. The script sends a connection request to the server and attempts to detect Argus Surveillance DVR and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Argus Surveillance DVR 4.0.0.0 - Directory Traversal

Exploit: Argus Surveillance DVR 4.0.0.0 - Directory Traversal Author: John Page aka hyp3rlinx Date: 2018-08-28 Vendor: www.argussurveillance.com Software Link: http://www.argussurveillance.com/download/DVRstp.exe CVE: N/A Description: Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated...

Starbucks: DVR default username and password

Summary: default username and password i found in one of your DVR camera system Description: hi after scanning on starbucks register ip from this site http://bge.he.net i start to scan the ip subnet : ████ then i found this ip : █████ then i try to browse it then i found login page for DVR cam...

AVTech AVC 787 DVR Default Credentials (HTTP)

The remote AVTech AVC 787 DVR device is using known default credentials. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

AVTech AVC 7xx DVR Device Detection (HTTP)

HTTP based detection of AVTech AVC 7xx DVR devices. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DVR Web Remote Viewer Detection (HTTP)

HTTP based detection of a DVR Web Remote Viewer software. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...