1691 matches found
CVE-2023-2226 Velociraptor crashes while parsing some malformed PE or OLE files.
Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed, the attacker needs to be able to introduce malicious files to the system a...
CVE-2023-2226 Velociraptor crashes while parsing some malformed PE or OLE files.
Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. For this attack to succeed, the attacker needs to be able to introduce malicious files to the system a...
Microsoft OLE DB Driver for SQL Server Installed (Windows)
Binary data microsoftoledbdriverforsqlserverwininstalled.nbin...
Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions
The Transparent Tribe threat actor has been linked to a set of weaponized Microsoft Office documents in intrusions directed against the Indian education sector to deploy a continuously maintained piece of malware called Crimson RAT. While the suspected Pakistan-based threat group is known to targ...
CVE-2023-28304
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
CVE-2023-28304
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
CVE-2023-28275
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-28275
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-23375
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2023-28304 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
...
CVE-2023-28304
CVE-2023-28304 affects Microsoft ODBC/OLE DB drivers for SQL Server (e.g., ODBC Driver 17/18, OLE DB Driver 18/19). Root cause: insufficient input validation in the Windows ODBC and OLE DB drivers. Impact: can lead to remote/local arbitrary code execution depending on source; CVSS shows local att...
CVE-2023-28304 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
...
CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-28275
Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.
CVE-2023-23375
CVE-2023-23375 covers a Microsoft ODBC and OLE DB remote code execution vulnerability. Connected sources indicate vulnerable components include Microsoft ODBC Driver 17/18 and Microsoft OLE DB Driver 18 (SQL Server), with PT-2023-2559 citing insufficient input validation as the underlying issue i...