CVE-2024-37340: Untrusted Pointer Dereference

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

PT-2024-6354

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in dynamic memory. Exploitation of this issue may allow a remote attacke...

CVE-2024-37966: Out-of-bounds Read

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability...

CVE-2024-37338: Out-of-bounds Read

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37335: Heap-based Buffer Overflow

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-26186: Use After Free

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37342: Out-of-bounds Read

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability...

PT-2024-6356

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, which is vulnerable due to a dereference of an untrusted pointer. This could...

PT-2024-6358 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code...

CVE-2024-37339: Untrusted Pointer Dereference

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

PT-2024-6360 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, and involves a problem with dereferencing an untrusted pointer. This could...

PT-2024-6353 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, which has a problem with using memory after it has been freed. This can be...

CVE-2024-26191: Heap-based Buffer Overflow

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-34158 vulnerabilities

Vulnerabilities for packages: chezmoi, atlantis-fips, spqr, flux-helm-controller-fips, prometheus-elasticsearch-exporter, glab, harbor-registry-fips, gomplate, go-bindata, skopeo, go-md2man, kubescape, mkcert, vault-csi-provider, azure-aad-pod-identity-mic, grpcurl, rekor-fips, argo-workflows,...

Native DNS Spoofer

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Native DNS Spoofer Example', 'Description' = %q This module provides a Rex based DNS service to resolve queries intercepted via the capture mixin...

IBM Notes Denial Of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "IBM Notes Denial Of Service", 'Description' = %q This module exploits a vulnerability in the native browser that comes with IBM Lotus Notes. If...

CVE-2024-45054

Hwameistor is an HA local storage system for cloud-native stateful workloads. This ClusterRole has verbs of resources. If a malicious user can access the worker node which has hwameistor's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster,...

CVE-2024-45054

CVE-2024-45054 affects Hwameistor’s clusterrole permissions, allowing a user with access to a worker node to abuse excessive privileges and achieve cluster‑level privilege escalation. Multiple connected sources confirm the issue and point to a fix in Hwameistor v0.14.6. Impact is limited to misco...

CVE-2024-45054 Potential Permission Leakage of Cluster Level in hwameistor

Hwameistor is an HA local storage system for cloud-native stateful workloads. This ClusterRole has verbs of resources. If a malicious user can access the worker node which has hwameistor's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster,...

CVE-2024-45054 Potential Permission Leakage of Cluster Level in hwameistor

Hwameistor is an HA local storage system for cloud-native stateful workloads. This ClusterRole has verbs of resources. If a malicious user can access the worker node which has hwameistor's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster,...