Bloomberg Comdb2 代码问题漏洞

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the handling of coordinated fields by the distributed transaction component, potentially...

CVE-2025-46354: Reachable Assertion

A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability...

PT-2025-30430 · Bloomberg · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A denial of service issue exists in the Bloomberg Comdb2 database when processing a distributed transaction heartbeat. Sending a specially crafted protocol buffer message to a database instance over T...

CVE-2025-48498: NULL Pointer Dereference

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...

CVE-2025-36512: Reachable Assertion

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message...

The vulnerability of the Microsoft Distributed Transaction Coordinator (MSDTC) on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Distributed Transaction Coordinator MSDTC on Windows operating systems is related to improper external management of file names or file paths. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability...

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability...

CVE-2024-38049

Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.

CVE-2024-38049 Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

...

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Distributed Transaction Coordinator. An attacker could exploit the vulnerability to remotely execute code. The following products and...

CVE-2024-38049: External Control of File Name or Path

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB5030213)

This host is missing an important security update according to Microsoft KB5030213 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

IBM TXSeries for Multiplatforms Denial of Service Vulnerability

IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A denial of service vulnerability exists in IBM TXSeries for Multiplatforms versions...

Researchers Shed Light on CatB Ransomware's Evasion Techniques

The threat actors behind the CatB ransomware operation have been observed using a technique called DLL search order hijacking to evade detection and launch the payload. CatB, also referred to as CatB99 and Baxtoy, emerged late last year and is said to be an "evolution or direct rebrand" of anothe...

Microsoft Distributed Transaction Controller Denial of Service (MS05-051; CVE-2005-1979)

The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...

Microsoft Windows WMI服务隔离本地权限提升漏洞（MS09-012）

BUGTRAQ ID: 34442 CVECAN ID: CVE-2009-0078 Microsoft Windows是微软发布的非常流行的操作系统。 Windows管理规范（WMI）提供程序没有正确地隔离NetworkService或LocalService帐号下运行的进程，同一帐号下运行的两个独立进程可以完全访问对方的文件句柄、注册表项等资源。WMI提供程序主机进程在某些情况下会持有SYSTEM令牌，如果攻击者可以以...

Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)

This host is missing a critical security update according to Microsoft Bulletin MS09-012. OpenVAS Vulnerability Test $Id: secpodms09-012.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in Windows Could Allow Elevation of Privilege 959454 Authors: Chandan S Updated By: Madhuri D on...

MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net

Although it is a time ago of the vulnerability, but had been only concerned with the exploits, and not focus on specific solutions, today inadvertently and the user-chat when mentioned, the user let help to find a solution, the online search under, In The Lancet where to find the relevant...