Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-26263. PoCs published by Giorgi Dograshvili, DRAGOWN.
AI-analyzed exploit summary This is a writeup describing a credentials disclosure vulnerability in GeoVision ASManager Windows Application 6.1.2.0 or less. The vulnerability allows high-privilege attackers to dump credentials from the ASManagerService.exe process memory, leading to unauthorized access and control over security management systems.
Description
GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less (fixed in 6.2.0), is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process.
Exploits (2)
This is a writeup describing a credentials disclosure vulnerability in GeoVision ASManager Windows Application 6.1.2.0 or less. The vulnerability allows high-privilege attackers to dump credentials from the ASManagerService.exe process memory, leading to unauthorized access and control over security management systems.
This repository documents CVE-2025-26263, a credential disclosure vulnerability in GeoVision ASManager due to improper memory handling. It describes methods to dump credentials from memory, including triggering memory allocation via the 'Forget Password?' function.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N