CVE-2023-21554

Este repositorio no tiene un README...

CVE-2023-21554

MSMQ 漏洞概念验证 该仓库包含一个即用型概念验证，针对在 TCP 端口 1801 上监听的 Microsoft 消息队列。本工作基于并使用了原始项目的材料，原始项目位于： https://github.com/leongxudong/MSMQ-Vulnerability 本仓库使用了该项目提供的二进制工件。PoC 包含和引用的二进制文件如下： 1. establishconnection.bin 2. connectionparameters.bin 3. usermessage.bin 描述 本 PoC 尝试复现 CVE‑2023‑21554 中描述的情况，方法是将一系列 MSMQ...

CVE-2023-21554-PoC

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve202321554/ poc 文件执行前需要自行修改目标机器 IP 地址 poc 成功的标志是 mqsvc.exe 进程的崩溃，并没有弹窗信息，需要在类似进程监控器的程序里看到...

Exploit for Improper Input Validation in Microsoft

PoC exploit for CVE-2023-21554, a vulnerability in MSMQ. The tar...

Exploit for Improper Input Validation in Microsoft

PoC exploit for CVE-2023-21554, a vulnerability in MSMQ. The tar...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC，...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554-PoC CVE-2023-21554 is a Windows MessageQueuin...

Microsoft Message Queuing RCE (CVE-2023-21554, QueueJumper)

Binary data msmq2023-04.nbin...

Microsoft April 2023 Patch Tuesday Highlights: everything you need to know

Detect and mitigate CVE-2023-28252, EoP vulnerability exploited in the wild, and CVE-2023-21554, a critical RCE vulnerability. Organizations should patch urgently...

Update now! April’s Patch Tuesday includes a fix for one zero-day

Its Patch Tuesday again. Microsoft and other vendors have released their monthly updates. Among a total of 97 patched vulnerabilities there is one actively exploited zero-day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix...

CVE-2023-21554

creationtimestamp| type| source ---|---|--- 2023-04-11 21:23:37+00:00| published-proof-of-concept| https://t.me/arvinclub1/15 2023-04-12 14:53:28+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1005 2023-04-12 21:51:51+00:00| published-proof-of-concept|...

CVE-2023-21554

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-21554

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly round of security updates and patches today, continuing its trend of fixing zero-day vulnerabilities on Patch Tuesday. Aprils security update includes one vulnerability thats actively being exploited in the wild. There are also eight critical vulnerabilities and the...

CVE-2023-21554

The CVE-2023-21554 vulnerability is an RCE in Microsoft Message Queuing (MSMQ) due to improper input validation (CWE-20) in the MSMQ service. When MSMQ is enabled, a crafted MSMQ packet over TCP port 1801 can trigger an out-of-bounds/overflow condition, potentially allowing remote code execution....

CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

KB5025229: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2023)

The remote Windows host is missing security update 5025229. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

KB5025221: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (April 2023)

The remote Windows host is missing security update 5025221. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

KB5025288: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (April 2023)

The remote Windows host is missing security update 5025288. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...