1734 matches found
CVE-2023-29325
CVE-2023-29325 is a Windows OLE Remote Code Execution vulnerability that affects Microsoft Outlook and Explorer. The root cause is in the processing of OLE objects within RTF/documents, enabling an unauthenticated, remote attacker to execute code by delivering a specially crafted document, with t...
Windows OLE Remote Code Execution Vulnerability
...
Denial Of Service (DoS)
github.com/velocidex/velociraptor is vulnerable to Denial of Service DoS attacks. Due of poor validation in the PE and OLE parsers, an attacker is able to cause the application to crash by processing a deliberately malformed file...
Input validation
Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed, the attacker needs to be able to introduce malicious files to the system a...
CVE-2023-2226 Velociraptor crashes while parsing some malformed PE or OLE files.
Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed, the attacker needs to be able to introduce malicious files to the system a...
CVE-2023-2226 Velociraptor crashes while parsing some malformed PE or OLE files.
Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed, the attacker needs to be able to introduce malicious files to the system a...
Microsoft OLE DB Driver for SQL Server Installed (Windows)
Binary data microsoftoledbdriverforsqlserverwininstalled.nbin...
Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions
The Transparent Tribe threat actor has been linked to a set of weaponized Microsoft Office documents in intrusions directed against the Indian education sector to deploy a continuously maintained piece of malware called Crimson RAT. While the suspected Pakistan-based threat group is known to targ...
CVE-2023-28304
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
CVE-2023-28304
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
CVE-2023-28275
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-28275
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-23375
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-28304 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
...
CVE-2023-28304 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
...
CVE-2023-28304
CVE-2023-28304 affects Microsoft ODBC/OLE DB drivers for SQL Server (e.g., ODBC Driver 17/18, OLE DB Driver 18/19). Root cause: insufficient input validation in the Windows ODBC and OLE DB drivers. Impact: can lead to remote/local arbitrary code execution depending on source; CVSS shows local att...