CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

CVE-2023-32028 Microsoft SQL OLE DB Remote Code Execution Vulnerability

...

How to Collect Logs for Veeam Plug-in for Microsoft SQL Server

Purpose This article explains how to collect the logs required for a support case involving Veeam Plug-in for Microsoft SQL Server. Solution Quick Start Automated Veeam Plug-in for Microsoft SQL Server Log Collection If the Windows machines where Veeam Plug-in for Microsoft SQL Server is installe...

CVE-2023-0620

HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL MSSQL Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provide...

How to Migrate Veeam Backup Enterprise Manager's Database from Microsoft SQL to PostgreSQL

Purpose This article documents the migration of the Veeam Backup Enterprise Manager Enterprise Manager configuration database from Microsoft SQL to PostgreSQL. Notes: The migration process is one-way only. Migration can only be performed from Microsoft SQL to PostgreSQL. Note: Starting in Veeam...

ansible-collection-microsoft-sql bug fix and enhancement update

An update is available for ansible-collection-microsoft-sql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release,...

Design/Logic Flaw

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...

Metasploit Weekly Wrap-Up

Ask and you may receive Module suggestions for the win, this week we see a new module written by jheysel-r7 based on CVE-2022-26352 that happens to have been suggested by jvoisin in the issue queue last month. This module targets an arbitrary file upload in dotCMS versions before 22.03, 5.3.8.10,...

new packages: ansible-collection-microsoft-sql

An update is available for ansible-collection-microsoft-sql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release,...

ansible-collection-microsoft-sql bug fix and enhancement update

An update is available for ansible-collection-microsoft-sql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release,...

ALBA-2022:1971 ansible-collection-microsoft-sql bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Gh0stCringe RAT makes database servers squeal for protection

Researchers have found that the Gh0stCringe RAT is infecting Microsoft SQL and MySQL, and seems to focus on servers with weak protection. The Gh0stCringe RAT communicates with a command and control C&C server to receive instructions and is capable of exfiltrating information. SQL SQL is short for...

new packages: ansible-collection-microsoft-sql

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALEA-2021:4283 new packages: ansible-collection-microsoft-sql

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft SQL Elevation of Privilege Vulnerability...

CVE-2021-1636 Microsoft SQL Elevation of Privilege Vulnerability

...

Information disclosure

IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information...

CVE-2019-4703

IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information...