mssqlbof

mssqlbof 마이크로소프트 SQL Server를 위한 Beacon Object File 제품군으로, 자체적으로 TDS 7.4를 C로 구현하여 네트워크 통신을 수행합니다. msodbcsql.dll, sqloledb.dll, .NET CLR, PowerShell이 필요 없습니다. 아키텍처당 하나의 COFF 파일이 로드되며, 표준 Beacon API를 준수하는 모든 비콘에서 실행됩니다. 배경 SQL Server는 거의 모든 엔지니어링 작업에서 등장합니다. 주로 사용되는 도구는 SQLRecon / PowerUpSQL CLR +...

sccmsqlclient

sccmsqlclient SCCM データベースの探索と悪用のための専用 MSSQL クライアントです。 偵察クエリ 管理対象クライアントでの PowerShell スクリプト実行 シークレットの抽出 インストール PIPX $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP リポジトリをクローンして依存関係をインストールすることで導入できます。 $ git clone https://github.com/synacktiv/sccmsqlclient $ cd sccmsqlclient $...

EUVD-2026-95330

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...

CVE-2026-84058

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...

CVE-2026-84058

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a buffer overrun (CWE-119) within the TDS (Microsoft SQL Server) PRELOGIN packet decoder of the Sniffer component . A remote attacker capable of sending a specially crafted TDS PRELOGIN packet to a network monitored by a...

CVE-2026-84058 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...

CVE-2026-82344

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

PT-2026-108175

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.1 Description A heap-based buffer overflow exists in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that...

CVE-2026-2350: Insertion of Sensitive Information into Log File

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-2350 Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

EUVD-2015-8617

Malware in sbrugna...

EUVD-2025-11374

Malicious code in bioql PyPI...

Malicious code in ng-tds (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3294da0f9faffb8ba69b152216b52a8aa4ebcf64678bcd336c917b3e054530d The OpenSSF Package Analysis project identified 'ng-tds' @...

Malicious ISO File Used in Romance Scam Targeting German Speakers

Sublime Security reveals a cunning romance/adult-themed scam targeting German speakers, leveraging Keitaro TDS to deliver an AutoIT-based malware loader. Learn how this sophisticated campaign operates, its deceptive tactics, and the hidden payload...

CVE-2025-22023: Use After Free

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 "usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped" in v6.11, the driver didn't skip missed isochronous TDs when handling...

Malicious code in tds-styled-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fd1f1a79e054904c1996f83eaebf071439a273c6c1eb478e4f6c2fed1a2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10254 Malicious code in tds-styled-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fd1f1a79e054904c1996f83eaebf071439a273c6c1eb478e4f6c2fed1a2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in tds-styled-docs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

Facebook users are the target of a scam e-commerce network that uses hundreds of fake websites to steal personal and financial data using brand impersonation and malvertising tricks. Recorded Future's Payment Fraud Intelligence team, which detected the campaign on April 17, 2024, has given it the...