Month: October 2023

Microsoft Windows Graphics privilege escalation | CVE-2023-38159

October 11, 2023

NAME__________Microsoft Windows Graphics privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows...

Lenovo Desktop, Smart Edge and ThinkStation products privilege escalation | CVE-2023-25494

October 11, 2023

NAME__________Lenovo Desktop, Smart Edge and ThinkStation products privilege escalationPlatforms Affected:Lenovo ThinkStation Lenovo Desktop Lenovo Smart EdgeRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Lenovo Desktop,...

Google Chrome security bypass | CVE-2023-5481

October 11, 2023

NAME__________Google Chrome security bypassPlatforms Affected:Google Chrome 118.0Risk Level:4.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Google Chrome could allow a remote attacker to bypass security restrictions,...

Microsoft Windows Message Queuing code execution | CVE-2023-36578

October 11, 2023

NAME__________Microsoft Windows Message Queuing code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft...

Microsoft Azure DevOps Server privilege escalation | CVE-2023-36561

October 11, 2023

NAME__________Microsoft Azure DevOps Server privilege escalationPlatforms Affected:Microsoft Azure DevOps Server 2022.0.1 Microsoft Azure DevOps Server 2020.0.2 Microsoft Azure DevOps Server...

Microsoft SQL ODBC Driver code execution | CVE-2023-36785

October 11, 2023

NAME__________Microsoft SQL ODBC Driver code executionPlatforms Affected:Microsoft SQL Server 2019 for X64-based systems (GDR) x64 Microsoft SQL Server 2022 for...

Microsoft Windows Message Queuing code execution | CVE-2023-36591

October 11, 2023

NAME__________Microsoft Windows Message Queuing code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft...

Microsoft Windows Windows Kernel information disclosure | CVE-2023-36576

October 11, 2023

NAME__________Microsoft Windows Windows Kernel information disclosurePlatforms Affected:Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows 10 1809 for x64-based...

Unisoc Chipsets information disclosure | CVE-2023-40637

October 11, 2023

NAME__________Unisoc Chipsets information disclosurePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc T760 Unisoc T618 Unisoc T612...

Unisoc Chipsets information disclosure | CVE-2023-40645

October 11, 2023

NAME__________Unisoc Chipsets information disclosurePlatforms Affected:Unisoc SC9863ARisk Level:4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Unisoc Chipsets could allow a local authenticated attacker to obtain sensitive information,...

Lenovo Desktop, Smart Edge and ThinkStation products privilege escalation | CVE-2023-45079

October 11, 2023

Microsoft Windows Named Pipe File System privilege escalation | CVE-2023-36729

October 11, 2023

NAME__________Microsoft Windows Named Pipe File System privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10...

Microsoft Windows Remote Desktop Gateway (RD Gateway) information disclosure | CVE-2023-29348

October 11, 2023

NAME__________Microsoft Windows Remote Desktop Gateway (RD Gateway) information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows...

Microsoft Windows Message Queuing denial of service | CVE-2023-36579

October 11, 2023

NAME__________Microsoft Windows Message Queuing denial of servicePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32...

Microsoft Windows AllJoyn API denial of service | CVE-2023-36709

October 11, 2023

NAME__________Microsoft Windows AllJoyn API denial of servicePlatforms Affected:Microsoft Windows 10 x32 Microsoft Windows 10 x64 Microsoft Windows Server 2016 Microsoft...

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-36416

October 11, 2023

NAME__________Microsoft Dynamics 365 (on-premises) cross-site scriptingPlatforms Affected:Microsoft Dynamics 365 (on-premises) 9.0 Microsoft Dynamics 365 (on-premises) 9.1Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Microsoft Dynamics...

Micro Research MR-GM series routers default account | CVE-2023-45194

October 11, 2023

NAME__________Micro Research MR-GM series routers default accountPlatforms Affected:Micro Research MR-GM2 3.00.03 Micro Research MR-GM3 series 1.03.45Risk Level:6.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Micro Research...

Microsoft Windows Win32k privilege escalation | CVE-2023-36743

October 11, 2023

NAME__________Microsoft Windows Win32k privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows...

Microsoft Windows Message Queuing code execution | CVE-2023-36571

October 11, 2023

NAME__________Microsoft Windows Message Queuing code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft...

Lenovo Desktop products privilege escalation | CVE-2023-43580

October 11, 2023

NAME__________Lenovo Desktop products privilege escalationPlatforms Affected:Lenovo DesktopRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Lenovo Desktop products could allow a local authenticated attacker to gain...

Month: October 2023

Microsoft Windows Graphics privilege escalation | CVE-2023-38159

Lenovo Desktop, Smart Edge and ThinkStation products privilege escalation | CVE-2023-25494

Google Chrome security bypass | CVE-2023-5481

Microsoft Windows Message Queuing code execution | CVE-2023-36578

Microsoft Azure DevOps Server privilege escalation | CVE-2023-36561

Microsoft SQL ODBC Driver code execution | CVE-2023-36785

Microsoft Windows Message Queuing code execution | CVE-2023-36591

Microsoft Windows Windows Kernel information disclosure | CVE-2023-36576

Unisoc Chipsets information disclosure | CVE-2023-40637

Unisoc Chipsets information disclosure | CVE-2023-40645

Lenovo Desktop, Smart Edge and ThinkStation products privilege escalation | CVE-2023-45079

Microsoft Windows Named Pipe File System privilege escalation | CVE-2023-36729

Microsoft Windows Remote Desktop Gateway (RD Gateway) information disclosure | CVE-2023-29348

Microsoft Windows Message Queuing denial of service | CVE-2023-36579

Microsoft Windows AllJoyn API denial of service | CVE-2023-36709

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-36416

Micro Research MR-GM series routers default account | CVE-2023-45194

Microsoft Windows Win32k privilege escalation | CVE-2023-36743

Microsoft Windows Message Queuing code execution | CVE-2023-36571

Lenovo Desktop products privilege escalation | CVE-2023-43580

Unisoc Chipsets information disclosure | CVE-2023-40640

Microsoft Windows Deployment Services denial of service | CVE-2023-36707

Microsoft Windows WordPad code execution | CVE-2023-36563

Unisoc Chipsets denial of service | CVE-2023-40638

[KILLSEC] – Ransomware Victim: Nationwide Legal

[KILLSEC] – Ransomware Victim: Eassy Life

[INCRANSOM] – Ransomware Victim: Service Avicole JGL

[KILLSEC] – Ransomware Victim: Vogue Homes

[KILLSEC] – Ransomware Victim: Efi Sales

You may have missed