cve-2020-0618

CVE-2020-0618 Honeypot Detects and logs attempts to exploit CVE-020-0618 SQL Reporting Services RCE Serves content and headers like SSRS would, in order to increase chance of indexing on search engines e.g. google, shodan etc. Based on the great work of MDSec and x1sec Installation Get the code...

Microsoft SQL Server Reporting Services - Remote Code Execution Detection

Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it incorrectly handles page requests. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

EUVD-2025-208846

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) is vulnerable to the execution of arbitrary SQL commands due to improper handling of raw SQL queries during the upload of a .rdl (Report Definition Language) file. This file is subsequently processed by the SQL Server Repo...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

PT-2026-26140

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

EUVD-2019-9891

Malware in sbrugna...

EUVD-2020-11938

Malware in sbrugna...

CVE-2019-1332

A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'...

KB3207512 - Important update for SQL Server 2016 SP1 Reporting Services

KB3207512 - Important update for SQL Server 2016 SP1 Reporting Services Applies To SQL Server 2016 Developer - duplicate do not use SQL Server 2016 Enterprise - duplicate do not use SQL Server 2016 Enterprise Core - duplicate do not use SQL Server 2016 Express - duplicate do not use SQL Server 20...

KB3180915 - Cumulative Update 5 for SQL Server 2012 Service Pack 3

KB3180915 - Cumulative Update 5 for SQL Server 2012 Service Pack 3 Applies To SQL Server 2012 Service Pack 3 SQL Server 2012 Analysis Services SQL Server 2012 Business Intelligence SQL Server 2012 Enterprise SQL Server 2012 Enterprise Core SQL Server 2012 Express SQL Server 2012 for Embedded...

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account...

Security Bulletin: IBM Jazz Reporting Services is vulnerable to a to cross-site scripting (CVE-2020-4051)

Summary Cross-site scripting has been identified in dojo library shipped with IBM Jazz Reporting Services JRS. JRS has addressed the issues by releasing a fix Vulnerability Details CVEID:CVE-2020-4051 DESCRIPTION: Dijit is vulnerable to cross-site scripting, caused by improper validation of...

October 17, 2017—KB4043961 (OS Build 16299.19)

October 17, 2017—KB4043961 OS Build 16299.19 Applies To Windows 10, version 1709, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where, after removing apps,...

KB4464343 - Cumulative Update 12 for SQL Server 2016 SP1

KB4464343 - Cumulative Update 12 for SQL Server 2016 SP1 Release Date: November 13, 2018 Version: 13.0.4541.0 This article describes cumulative update package 12 build number: 13.0.4541.0 for Microsoft SQL Server 2016 Service Pack 1 SP1. This update contains fixes that were released after the...

KB4040713 - Cumulative Update 8 for SQL Server 2016

KB4040713 - Cumulative Update 8 for SQL Server 2016 Release Date: September 18, 2017 Version: 13.0.2213.0 This article describes cumulative update package 8 build number: 13.0.2213.0 for Microsoft SQL Server 2016. This update contains fixes that were released after the release of SQL Server 2016...