23 matches found
CVE-2023-21554-PoC
CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve202321554/ poc 文件执行前需要自行修改目标机器 IP 地址 poc 成功的标志是 mqsvc.exe 进程的崩溃，并没有弹窗信息，需要在类似进程监控器的程序里看到...
CVE-2023-21554
MSMQ 漏洞概念验证 该仓库包含一个即用型概念验证，针对在 TCP 端口 1801 上监听的 Microsoft 消息队列。本工作基于并使用了原始项目的材料，原始项目位于： https://github.com/leongxudong/MSMQ-Vulnerability 本仓库使用了该项目提供的二进制工件。PoC 包含和引用的二进制文件如下： 1. establishconnection.bin 2. connectionparameters.bin 3. usermessage.bin 描述 本 PoC 尝试复现 CVE‑2023‑21554 中描述的情况，方法是将一系列 MSMQ...
CVE-2023-21554
Este repositorio no tiene un README...
Exploit for Improper Input Validation in Microsoft
PoC exploit for CVE-2023-21554, a vulnerability in MSMQ. The tar...
Exploit for Improper Input Validation in Microsoft
PoC exploit for CVE-2023-21554, a vulnerability in MSMQ. The tar...
Exploit for Improper Input Validation in Microsoft
CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC，...
Exploit for Improper Input Validation in Microsoft
CVE-2023-21554-PoC CVE-2023-21554 is a Windows MessageQueuin...
Microsoft Message Queuing RCE (CVE-2023-21554, QueueJumper)
Binary data msmq2023-04.nbin...
Microsoft April 2023 Patch Tuesday Highlights: everything you need to know
Detect and mitigate CVE-2023-28252, EoP vulnerability exploited in the wild, and CVE-2023-21554, a critical RCE vulnerability. Organizations should patch urgently...
Update now! April’s Patch Tuesday includes a fix for one zero-day
Its Patch Tuesday again. Microsoft and other vendors have released their monthly updates. Among a total of 97 patched vulnerabilities there is one actively exploited zero-day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix...
CVE-2023-21554
creationtimestamp| type| source ---|---|--- 2023-04-11 21:23:37+00:00| published-proof-of-concept| https://t.me/arvinclub1/15 2023-04-12 14:53:28+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1005 2023-04-12 21:51:51+00:00| published-proof-of-concept|...
CVE-2023-21554
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-21554
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities
Microsoft released its monthly round of security updates and patches today, continuing its trend of fixing zero-day vulnerabilities on Patch Tuesday. Aprils security update includes one vulnerability thats actively being exploited in the wild. There are also eight critical vulnerabilities and the...
CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
CVE-2023-21554
The CVE-2023-21554 vulnerability is an RCE in Microsoft Message Queuing (MSMQ) due to improper input validation (CWE-20) in the MSMQ service. When MSMQ is enabled, a crafted MSMQ packet over TCP port 1801 can trigger an out-of-bounds/overflow condition, potentially allowing remote code execution....
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...
KB5025229: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2023)
The remote Windows host is missing security update 5025229. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...
KB5025288: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (April 2023)
The remote Windows host is missing security update 5025288. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...