4613 matches found
A Deep Dive into Database Attacks [Part II]: Delivery and Execution of Malicious Executables through SQL commands (SQL Server)
An organization’s database servers are frequently the prime target of attackers. We recently started a new research project we named StickyDB to learn more about database hacking, primarily to understand common database attacks, tools and techniques engaged by attackers. To conduct this research,...
MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593) (uncredentialed check)
The remote host is running a version of Windows that has multiple buffer overflow vulnerabilities when viewing VML, EMF, GIF, WMF and BMP files that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to send a malformed image file ...
HPE iMC - dbman 'RestartDB' Remote Command Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestartDB Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packard...
ADV180002: Microsoft SQL Server January 2018 Security Update (Meltdown) (Spectre)
The remote Microsoft SQL Server is missing a security update. It is, therefore, affected by a vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to disclose information via a side-channel...
Description of the security update for SQL Server 2014 SP2 CU10: January 16, 2018
None None...
Description of the security update for SQL Server 2008 R2 SP3 GDR: January 6, 2018
None None...
Description of the security update for SQL Server 2014 SP2 GDR: January 16, 2018
None None...
Description of the security update for SQL Server 2017 GDR: January 3, 2018
None None...
Description of the security update for SQL Server 2008 SP4 GDR: January 6, 2018
None None...
Description of the security update for SQL Server 2016 SP1 GDR: January 3, 2018
None None...
Description of the security update for SQL Server 2012 SP3 CU: January 16, 2018
None None...
Description of the security update for SQL Server 2012 SP3 GDR: January 16, 2018
None None...
Description of the security update for SQL Server 2012 SP4 GDR: January 12, 2018
None None...
Description of the security update for SQL Server 2016 GDR: January 6, 2018
None None...
Description of the security update for SQL Server 2016 SP1 CU7: January 3, 2018
None None...
Description of the security update for SQL Server 2016 CU: January 6, 2018
None None...
Description of the security update for SQL Server 2017 RTM CU3: January 3, 2018
None None...
KLA11168 Multiple vulnerabilities in Microsoft SQL Server
Multiple information disclosure vulnerabilities have been found in Microsoft SQL Server. Malicious user can exploit these vulnerabilities to obtain sensitive information. These vulnerabilities can be exploited remotelly via speculative execution side-channel attack to obtain sensetive information...
Release Notes for Veeam ONE 9.5 Update 3
Challenge Release Notes for Veeam ONE 9.5 Update 3 Cause Please confirm you are running Veeam ONE 9.5 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client , the build number should be 9.5.0.3201 or 9.5.0.3254. After upgrading, your version build will ...