EUVD-2018-1700

Malware in sbrugna...

EUVD-2018-1659

Malware in sbrugna...

April 11, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002381)

April 11, 2023, cumulative update for SharePoint Enterprise Server 2013 KB5002381 Cumulative update packages for Microsoft SharePoint Enterprise Server 2013 contain hotfixes for the issues that were fixed since the release of SharePoint Enterprise Server 2013. Note: This is build 15.0.5545.1000 o...

Description of the security update for SharePoint Enterprise Server 2013: March 14, 2023 (KB5002168)

Description of the security update for SharePoint Enterprise Server 2013: March 14, 2023 KB5002168 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​Microsoft Common Vulnerabilities and Exposures...

March 14, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002366)

March 14, 2023, cumulative update for SharePoint Enterprise Server 2013 KB5002366 Cumulative update packages for Microsoft SharePoint Enterprise Server 2013 contain hotfixes for the issues that were fixed since the release of SharePoint Enterprise Server 2013. Note: This is build 15.0.5537.1000 o...

Security Updates for Microsoft SharePoint Server 2013 (March 2023)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid172534;...

Patch Tuesday - February 2023

It’s Patch Tuesday again. Microsoft is addressing fewer individual vulnerabilities this month than last, but there’s still plenty to keep admins and defenders occupied. Three zero-day vulnerabilities are vying for your attention today: a lone Microsoft Publisher vulnerability as well as a couple...

Description of the security update for Office Web Apps Server 2013: February 14, 2023 (KB5002313)

Description of the security update for Office Web Apps Server 2013: February 14, 2023 KB5002313 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see ​​​​​​​Microsoft Common Vulnerabilities and Exposures...

February 14, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002346)

February 14, 2023, cumulative update for SharePoint Enterprise Server 2013 KB5002346 Cumulative update packages for Microsoft SharePoint Enterprise Server 2013 contain hotfixes for the issues that were fixed since the release of SharePoint Enterprise Server 2013. Note: This is build 15.0.5529.100...

Description of the security update for SharePoint Enterprise Server 2013: February 14, 2023 (KB5002312)

Description of the security update for SharePoint Enterprise Server 2013: February 14, 2023 KB5002312 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the...

January 10, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002335)

January 10, 2023, cumulative update for SharePoint Enterprise Server 2013 KB5002335 Cumulative update packages for Microsoft SharePoint Enterprise Server 2013 contain hotfixes for the issues that were fixed since the release of SharePoint Enterprise Server 2013. Note: This is build 15.0.5519.1000...

KLA20157 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Offi...

Description of the security update for SharePoint Enterprise Server 2013: November 8, 2022 (KB5002235)

Description of the security update for SharePoint Enterprise Server 2013: November 8, 2022 KB5002235 Summary This security update resolves a Microsoft Word information disclosure vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnerabilities, see the...

Description of the security update for Office Web Apps Server 2013: November 8, 2022 (KB5002261)

Description of the security update for Office Web Apps Server 2013: November 8, 2022 KB5002261 Summary This security update resolves a Microsoft Word information disclosure vulnerability, Microsoft Word remote code execution vulnerability, and Microsoft Excel remote code execution vulnerability. ...

November 8, 2022, cumulative update for SharePoint Enterprise Server 2013 (KB5002302)

November 8, 2022, cumulative update for SharePoint Enterprise Server 2013 KB5002302 Cumulative update packages for Microsoft SharePoint Enterprise Server 2013 contain hotfixes for the issues that were fixed since the release of SharePoint Enterprise Server 2013. Note: This is build 15.0.5501.1000...

September 13, 2022, cumulative update for SharePoint Enterprise Server 2013 (KB5002264)

September 13, 2022, cumulative update for SharePoint Enterprise Server 2013 KB5002264 Cumulative update packages for Microsoft SharePoint Enterprise Server 2013 contain hotfixes for the issues that were fixed since the release of SharePoint Enterprise Server 2013. Note: This is build 15.0.5485.10...

Microsoft Confirms 2 New Exchange Zero-Day Flaws Being Used in the Wild

Microsoft officially disclosed it investigating two zero-day security vulnerabilities impacting Exchange Server 2013, 2016, and 2019 following reports of in-the-wild exploitation. "The first vulnerability, identified as CVE-2022-41040, is a Server-Side Request Forgery SSRF vulnerability, while th...

Microsoft Skype for Business Server输入验证错误漏洞

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft Corporation USA that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. An input validation error vulnerability exists in...

A week in security (June 27 – July 3)

Last week on Malwarebytes Labs: Ransomware review: June 2022 AstraLocker 2.0 ransomware isn’t going to give you your files back YTStealer targets YouTube content creators ZuoRAT is a sophisticated malware that mainly targets SOHO routers Amazon Photos vulnerability could have given attackers acce...

You only have nine months to ditch Exchange Server 2013

Microsoft has posted a reminder that Exchange Server 2013 reaches End of Support EoS on April 11, 2023. Thats a little more than 9 months from now. A useful and timely reminder, since we all realize that it takes some time to migrate to a different system. Every Windows product has a lifecycle. T...