Lucene search
+L

4610 matches found

Packet Storm
Packet Storm
added 2024/08/31 12:00 a.m.168 views

Microsoft SQL Server Escalate Db_Owner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SQL Server Escalate DbOwner', 'Description' = %q This module can be used to escalate privileges to sysadmin if the user has the dbowner...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:00 a.m.472 views

Microsoft SQL Server SUSER_SNAME SQL Logins Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SQL Server SUSERSNAME SQL Logins Enumeration', 'Description' = %q This module can be used to obtain a list of all logins from a SQL...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:00 a.m.218 views

Microsoft SQL Server SQL Injection NTLM Stealer

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SQL Server SQLi NTLM Stealer', 'Description' = %q This module can be used to help capture or relay the LM/NTLM credentials of the accou...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/08/09 12:00 a.m.301 views

Security Updates for Microsoft SQL Server OLE DB Driver (July 2024)

The Microsoft SQL Server OLE DB Driver installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker could exploit the vulnerability by tricking an authenticated user UI:R into attempting to connect to a malicious SQL...

8.8CVSS7AI score0.01645EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:00 a.m.13 views

The vulnerability of the OLE DB driver for SQL Server, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS6.1AI score0.01493EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:00 a.m.15 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/08 12:00 a.m.13 views

The vulnerability of the OLE DB driver for SQL Server, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.2AI score0.01611EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/06 12:00 a.m.13 views

The vulnerability of the OLE DB driver for SQL Server, related to buffer overflows in the “queue”, allows attackers to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.5AI score0.01854EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/22 9:15 p.m.15 views

CVE-2024-6912

Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove on all prone installations.This issue affects ProcessPlus: through 1.11.6507.0...

9.8CVSS5.8AI score0.01115EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2024/07/22 12:00 a.m.15 views

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system allows a hacker to trigger a service failure.

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service interruptions remotely...

6.8CVSS6.5AI score0.00857EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/22 12:00 a.m.14 views

PT-2024-37952 · Perkinelmer +1 · Perkinelmer Processplus +1

Name of the Vulnerable Software and Affected Versions: PerkinElmer ProcessPlus versions through 1.11.6507.0 Description: The issue is related to the use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows, allowing an attacker to login and potentially remove data on all prone...

9.8CVSS6.6AI score0.01115EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2024/07/22 12:00 a.m.11 views

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS6.4AI score0.01645EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2024/07/13 12:00 a.m.21 views

How to Export Target Devices into a .CSV File

This article details how to export Target Devices from a Provisioning Services PVS database in a formatted Comma Separated Values CSV file. Requirements SQL Server Management Studio or bcp.exe, both of which are components of a full SQL Server or SQL Server Express install...

7.7AI score
SaveExploits0
Citrix
Citrix
added 2024/07/13 12:00 a.m.12 views

Error: "Cannot verify database connectivity" on StoreFront

Though StoreFront server is able to communicate to the SQL server over TCP port 1433, when you click Test Connection at the Deploy Multiple Server Group setup Window for StoreFront 1.1, the connection fails with the following message: Cannot verify database connectivity. The connection string...

7.6AI score
SaveExploits0
Citrix
Citrix
added 2024/07/13 12:00 a.m.15 views

Provisioning Services Database Unable to Configure

Provisioning Service database cannot be configured. When configuring the SQL server settings, the following error might appear in the Configuration Wizard log located in C:\ProgramData\Citrix\Provisioning Services\Log: 2013-07-29 14:44:37,864 1 INFO ConfigWizard - ConfigureServices: encrypt the...

7.8AI score
SaveExploits0
NCSC
NCSC
added 2024/07/09 6:40 p.m.10 views

Vulnerabilities fixed in Microsoft Windows SQL Server

Microsoft has fixed vulnerabilities in Windows SQL Server. The vulnerabilities are in the Native Client of SQL Server and allow a malicious person to execute arbitrary code in the victim's context, potentially gaining access to sensitive data in Database environments to which the victim has acces...

8.8CVSS7.8AI score0.01854EPSS
SaveExploits0
OSV
OSV
added 2024/07/09 5:15 p.m.6 views

CVE-2024-38088

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01678EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/09 5:15 p.m.40 views

CVE-2024-38088

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

8.8CVSS0.01678EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/09 5:15 p.m.4 views

CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01678EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/09 5:15 p.m.44 views

CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

8.8CVSS0.01678EPSS
SaveExploits0References1
Rows per page
Query Builder