papers

Papers A handy collection of my public papers, all in one place. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db publication at https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An...

CVE-2007-6638

CVE-2007-6638 March Networks DVR 3204 - Logfile Information Disclosure Exploit-DB publication at https://www.exploit-db.com/exploits/4797/ Author Alex Hernandez aka @alt3kx...

EUVD-2019-18541

Malware in sbrugna...

EUVD-2007-6603

Malware in sbrugna...

EUVD-2007-0873

Malware in sbrugna...

CVE-2019-9163

The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects...

CVE-2019-9163

The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects...

CVE-2019-9163

CVE-2019-9163 affects the March Networks Command Client prior to version 2.7.2. The vulnerability arises during the connection initiation process, where crafted XAML objects can cause remote code execution. According to provided metrics, the CVSS v3.1 base score is 9.8 (CRITICAL) with a network a...

CVE-2019-9163: Improper Control of Generation of Code

The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects...

March Networks VisionWEB Default Credentials (HTTP)

The remote installation of March Networks VisionWEB is using known default credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

March Networks VisionWEB Remote Detection

Detects the installation of March Networks VisionWEB. This script sends an HTTP GET request and tries to ensure the presence of March Networks VisionWEB. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

marchnetworks.com XSS vulnerability

Vulnerable URL: https://www.marchnetworks.com/?s=%27%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 605732 VIP website status:| No Check marchnetworks.com...

March Networks DVR 3204 Logfile Information Disclosure Exploit

No description provided by source. !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server application. Any user...

CVE-2007-6638

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...

CVE-2007-6638

The CVE affects March Networks DVR 3204. The issue is improper access control in the web root that allows remote attackers to directly access scripts/logfiles.tar.gz, exposing usernames, passwords, device names, and IP addresses. The vulnerability is described with a CVSS base score of 10.0 (HIGH...

CVE-2007-6638: Undefined Security Weakness

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...

CVE-2007-6638

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...

March Networks DVR 3204 Logfile Information Disclosure Exploit

Exploit for hardware platform in category remote exploits ============================================================== March Networks DVR 3204 Logfile Information Disclosure Exploit ============================================================== !/usr/bin/perl March Networks DVR 3204 Logfile...

March Networks DVR 3204 - Logfile Information Disclosure

!/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server application. Any user can obtain the log files without...

March Networks DVR 3204 - Logfile Information Disclosure

March Networks DVR 3204 - Logfile Information Disclosure !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server...