CVE-2023-21554

This repository does not have a README...

CVE-2023-21554-PoC

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC, analysis at https://www.zoemurmure.top/posts/cve202321554/ Before executing the PoC file, modify the target machine IP address manually. The sign of a successful PoC is the crash of the mqsvc.exe process. There is no pop-up information...

CVE-2023-21554

MSMQ Vulnerability Proof of Concept This repository contains a ready-to-run proof of concept that targets Microsoft Message Queuing listening on TCP port 1801. This work is based on and uses materials from the original project at https://github.com/leongxudong/MSMQ-Vulnerability This repository...

Exploit for Improper Input Validation in Microsoft

PoC exploit for CVE-2023-21554, a vulnerability in MSMQ. The tar...

Exploit for Improper Input Validation in Microsoft

PoC exploit for CVE-2023-21554, a vulnerability in MSMQ. The tar...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC，...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554-PoC CVE-2023-21554 is a Windows MessageQueuin...

Microsoft Message Queuing RCE (CVE-2023-21554, QueueJumper)

Binary data msmq2023-04.nbin...

Microsoft April 2023 Patch Tuesday Highlights: everything you need to know

Detect and mitigate CVE-2023-28252, EoP vulnerability exploited in the wild, and CVE-2023-21554, a critical RCE vulnerability. Organizations should patch urgently...

Update now! April’s Patch Tuesday includes a fix for one zero-day

Its Patch Tuesday again. Microsoft and other vendors have released their monthly updates. Among a total of 97 patched vulnerabilities there is one actively exploited zero-day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix...

CVE-2023-21554

creationtimestamp| type| source ---|---|--- 2023-04-11 21:23:37+00:00| published-proof-of-concept| https://t.me/arvinclub1/15 2023-04-12 14:53:28+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1005 2023-04-12 21:51:51+00:00| published-proof-of-concept|...

CVE-2023-21554

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-21554

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly round of security updates and patches today, continuing its trend of fixing zero-day vulnerabilities on Patch Tuesday. Aprils security update includes one vulnerability thats actively being exploited in the wild. There are also eight critical vulnerabilities and the...

CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

CVE-2023-21554

The CVE-2023-21554 vulnerability is an RCE in Microsoft Message Queuing (MSMQ) due to improper input validation (CWE-20) in the MSMQ service. When MSMQ is enabled, a crafted MSMQ packet over TCP port 1801 can trigger an out-of-bounds/overflow condition, potentially allowing remote code execution....

KB5025234: Windows 10 LTS 1507 Security Update (April 2023)

The remote Windows host is missing security update 5025234. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

KB5025221: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (April 2023)

The remote Windows host is missing security update 5025221. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

KB5025228: Windows 10 Version 1607 and Windows Server 2016 Security Update (April 2023)

The remote Windows host is missing security update 5025228. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...