3049 matches found
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-32031
CVE-2023-32031 is an authenticated, network-exploitable Remote Code Execution in Microsoft Exchange Server. Sources describe it as a deserialization flaw in the Exchange Command class that can execute code with SYSTEM privileges via a network call after valid authentication. Public references not...
CVE-2023-32031 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-32031 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-28310 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-28310 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-28310
CVE-2023-28310 is a Microsoft Exchange Server Remote Code Execution vulnerability. The issue allows an authenticated attacker on the same network to trigger code execution on the server, via a PowerShell remoting session, with a CVSS v3.1 base score of 8.0 (High). Microsoft notes that exploitatio...
Microsoft’s June 2023 Patch Tuesday Addresses 78 Vulnerabilities
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Microsofts June 2023 Patch Tuesday addressed 78 flaws, including 38 remote code execution vulnerabilities. Notable fixes included SharePoint and Exchange Server vulnerabilities, while no zero-day...
Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits
At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be a proof-of-concept PoC exploi...
Microsoft Releases Updates to Patch Critical Flaws in Windows and Other Software
Microsoft has rolled out fixes for its Windows operating system and other software components to remediate major security shortcomings as part of Patch Tuesday updates for June 2023. Of the 73 flaws, six are rated Critical, 63 are rated Important, two are rated Moderated, and one is rated Low in...
Microsoft fixes six critical vulnerabilities in June Patch Tuesday
Its that time of the month again: We're looking at June's Patch Tuesday roundup. Microsoft has released its monthly update, and compared to previous months, its actually not so bad. No actively exploited zero-days and only six critical vulnerabilities. So, well have the luxury of going over those...
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-51368)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-51369)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...
Microsoft and Adobe Patch Tuesday, June 2023 Security Update Review
Microsoft has released Junes edition of Patch Tuesday! This installment of security updates addressed 94 security vulnerabilities in various products, features, and roles. Microsoft Patch Tuesday for June 2023 No zero-day vulnerabilities known to be exploited in the wild have been fixed in this...
Microsoft discloses 5 critical vulnerabilities in June's Patch Tuesday, no zero-days
Microsoft released its monthly security update Tuesday, disclosing 69 vulnerabilities across its suite of products and software. Five of these vulnerabilities are considered to be critical, 45 of them are listed as being high severity, 17 of them are medium severity and two are of low severity. F...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Description of the security update for Microsoft Exchange Server 2016: June 13, 2023 (KB5025903)
None None...
Description of the security update for Microsoft Exchange Server 2019: June 13, 2023 (KB5026261)
None None...
PT-2023-3127 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can affect the system...
KLA50319 Multiple vulnerabilities in Microsoft Server Software
A remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2023-32031 CVE-2023-28310 Exploitation Public exploits exist for this vulnerability. Malware exists for this...