Address C:\Marba$\Blog\Research

research

5 posts tagged “research”. Back to all posts.

Beckman Coulter's Remisol Advance - Security Advisory MARBAS-22-001 August 30, 2022
Six CVEs in Beckman Coulter's Remisol Advance lab middleware: insecure service permissions let any unprivileged user overwrite executables running as SYSTEM.
Bypass .NET Request Validation with MSSQL April 6, 2022
Getting past .NET request validation on old web forms by letting MSSQL reassemble the characters the filter wouldn't let you send.
CVE-2021-22521 - The ZEN of Privilege Escalation July 25, 2021
An unquoted service path in Micro Focus ZENworks that hands an attacker SYSTEM on an affected host, and how the disclosure played out.
CVE-2021-32077 - Fun With Social Security Numbers May 6, 2021
A healthcare credentialing platform exposed practitioner Social Security numbers. How CVE-2021-32077 was found, and what it says about medical software.
Your passwords are up for grabs. Here's how security researchers find them. February 12, 2019
How researchers dug through the 2019 dump of 770 million leaked credentials to find real passwords, and why the method no longer works.