{"vulnerability": "cve-2019-1068", "sightings": [{"uuid": "7a1b9cd6-0838-4086-b865-869fadc3caab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://t.me/itsec_news/3037", "content": "\u200b\u26a1\ufe0f\u0412\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 Mallox \u043c\u0435\u043d\u044f\u044e\u0442 \u0442\u0430\u043a\u0442\u0438\u043a\u0443: \u0447\u0435\u0433\u043e \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u043e\u0442 \u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u0443\u0434\u0430\u0440\u0430?\n\n\ud83d\udcac \u0413\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mallox, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a TargetCompany, Fargo \u0438 Tohnichi, \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0415\u0451 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 SQL-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 Mallox \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a \u0442\u0440\u043e\u044f\u043d \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remcos \u0438 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0442\u043e\u0440 BatCloak. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043f\u0440\u0435\u0436\u043d\u0438\u043c \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 SQL-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u2014 CVE-2020-0618 \u0438 CVE-2019-1068 . \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0435\u043d\u044f\u044e\u0442 \u0442\u0430\u043a\u0442\u0438\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c\u0438.\n\n\u041f\u0440\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 PowerShell, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Trend Micro \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 Mallox. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u0422\u043e\u0433\u0434\u0430 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a FUD \u0438 Metasploit, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443. FUD \u2014 \u044d\u0442\u043e \u043c\u0435\u0442\u043e\u0434 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043d\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u043b\u043e\u0441\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u043d\u044b\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438. \u0410 Metasploit \u2014 \u044d\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Mallox.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 FUD \u0438 Metasploit \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u043c-\u0442\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u043e\u0432\u044b\u043c \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u044b \u0442\u0438\u043f\u0430 Mallox \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0443\u044e\u0442 \u0441\u0432\u043e\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 Trend Micro, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432 Mallox \u0438\u043c\u0435\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 SQL-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u0435\u0442\u043e\u0434\u044b \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 Mallox, \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0433\u0440\u0443\u043f\u043f \u0442\u0438\u043f\u0430 Mallox \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u044b\u0439 \u043f\u043e\u0434\u0445\u043e\u0434, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u0430\u0445.\n\n\u0422\u0430\u043a\u043e\u0439 \u043c\u043d\u043e\u0433\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0449\u0435\u0440\u0431 \u043e\u0442 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f. \u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0438\u0437\u043e\u0449\u0440\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-08-08T13:30:19.000000Z"}, {"uuid": "0c201e79-5eb2-4460-883a-b7a7983bf9db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "published-proof-of-concept", "source": "Telegram/MS7lSh7g4N12UsjlYSjTiclS0454Ai6upg9-xQgDSMIUTg", "content": "", "creation_timestamp": "2021-03-15T12:48:23.000000Z"}, {"uuid": "ec4b8938-3ef1-43d8-8777-0e85843ba89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2687", "content": "#Threat_Research\n1. Root cause analysis and PoC for a MS SQL Server 2014/2016/2017 Stack Overflow Vulnerability (CVE-2019-1068) by reversing svl.dll\nhttps://0xsaiyajin.github.io/vulnerability-research/2021/02/06/discovering-an-undisclosed-stack-overflow-vulnerability-in-mssql-server-cve-2019-1068.html\n2. Analysis of CVE-2021-1722 - Windows Fax Service RCE Vulnerability\nhttps://streetfight.medium.com/analysis-of-cve-2021-1722-684d61a20041\n3. Swarm of Palo Alto PAN-OS vulnerabilities (PoCs):\n- arbitrary OS command execution by an authorized user (CVE-2020-2037/CVE-2020-2038)\n- DoS by an unauthorized user\u00a0(CVE-2020-2039)\n- reflected XSS\u00a0(CVE-2020-2036)\nhttps://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities", "creation_timestamp": "2021-02-12T12:57:54.000000Z"}, {"uuid": "f4d4f678-0bcb-43b2-a1c2-86154a1a8a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10682", "type": "seen", "source": "https://t.me/cibsecurity/10576", "content": "ATENTION\u203c New - CVE-2019-10682\n\ndjango-nopassword before 5.0.0 stores cleartext secrets in the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-18T17:31:08.000000Z"}, {"uuid": "8291f1d9-374d-4d82-b710-25b7c37cd547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/898", "content": "Discovering an Undisclosed Stack Overflow Vulnerability in Microsoft SQL Server (CVE-2019-1068) https://0xsaiyajin.github.io/vulnerability-research/2021/02/06/discovering-an-undisclosed-stack-overflow-vulnerability-in-mssql-server-cve-2019-1068.html", "creation_timestamp": "2026-08-03T13:23:48.168798Z"}, {"uuid": "05d3444a-c462-4e0e-8fcb-1c2f498e766b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10685", "type": "seen", "source": "Telegram/5E-LfOR-CghOQ7wwwqusuVHmxD5JHdCUSO3jdho0bohEIT0", "content": "", "creation_timestamp": "2026-08-29T23:00:06.153470Z"}, {"uuid": "7b4936fb-2e2e-47d2-b68d-2d440f66c461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10685", "type": "seen", "source": "https://t.me/cve_mitre_org/321", "content": "CVE-2019-10685 A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. https://t.co/4cy2Pu8imA\u2014 CVE (@CVEnew) May 24, 2019\n\nMay 24, 2019 at 09:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-24T18:48:32.000000Z"}, {"uuid": "90f8f0d9-ca83-4329-98f2-c8e791850038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mueh6cftmy2q", "content": "Oldest CVEs in this batch: CVE-2015-3246 (Red Hat), CVE-2015-5287 (Red Hat), CVE-2019-1068 (Microsoft), CVE-2021-23758 (Ajax.NET Professional).", "creation_timestamp": "2026-08-31T08:06:46.477315Z"}, {"uuid": "98740045-c74e-41ef-9b94-cf1f690278fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xerbdh32l", "content": "~Cisa~\nCISA added six actively exploited vulnerabilities, urging rapid remediation.\n-\nIOCs: CVE-2026-8452, CVE-2019-1068, CVE-2022-0995\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-08-29T13:13:25.216069Z"}, {"uuid": "008de37d-4e06-4765-860c-baee11b340fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtyuwxjcex2v", "content": "\ud83d\uded1 CVE-2019-1068\nMicrosoft SQL Server\nCVSS 8.8 / EPSS 45% / KEV: No\nTL;DR: A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectl\u2026\nhttps://cvesentinel.com/report/CVE-2019-1068?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-26T17:41:15.577495Z"}, {"uuid": "b0b25456-fcca-419e-b085-f0d5f22f0901", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b221c570-c586-44c2-9906-0948552f0802", "content": "", "creation_timestamp": "2026-08-26T18:00:02.790783Z"}, {"uuid": "90c92160-5c2a-4b02-8ba0-b0f0821b94df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10685", "type": "exploited", "source": "Telegram/5E-LfOR-CghOQ7wwwqusuVHmxD5JHdCUSO3jdho0bohEIT0", "content": "", "creation_timestamp": "2026-08-31T00:00:49.746232Z"}, {"uuid": "6d2fa666-8a9f-4aa3-949e-fc322e4a344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtzefi2rys2j", "content": "\ud83d\udea8 CISA Adds 6 KEV to Catalog\n\n\ud83d\udd34 CVE-2015-3246 Red Hat Libuser\n\ud83d\udfe0 CVE-2015-5287 Red Hat Automatic Bug Reporting Tool\n\ud83d\udd34 CVE-2019-1068 MS SQL Server\n\ud83d\udd34 CVE-2021-23758 Ajax.NET Professional\n\ud83d\udd34 CVE-2022-0995 Linux Kernel\n\ud83d\udd34 CVE-2026-8452 Citrix NetScaler ADC & NetScaler GW\n\nsecdb.nttzen.cloud/security-adv...", "creation_timestamp": "2026-08-26T22:17:50.281621Z"}, {"uuid": "1473e741-9cb3-4e34-b3e6-87a1d31ba832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mu3cftmcso23", "content": "CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog, including CVE-2026-8452 (Citrix NetScaler) and CVE-2019-1068 (Microsoft SQL Server). Active exploitation of CVE-2026-8452 has been reported, with attackers deploying web shells.", "creation_timestamp": "2026-08-27T16:47:34.767507Z"}, {"uuid": "9cbb230b-4ede-4473-9cd7-6a54a406891d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtziqtzble2s", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2019-1068", "creation_timestamp": "2026-08-26T23:35:45.659436Z"}, {"uuid": "b6ec4212-22d7-45ce-b829-fdcb85dab84c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fc17906-cb9e-4be9-8b44-959c479d2643", "content": "", "creation_timestamp": "2026-08-27T18:00:32.104269Z"}, {"uuid": "b482e651-fca8-4765-a065-865392211284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mu27xd4vsx2g", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2019-1068: \u26a0\ufe0f CVE-2019-1068: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 44.7%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2019-1068-a-remote-code-execution-vulnerability-exists", "creation_timestamp": "2026-08-27T06:30:59.229516Z"}, {"uuid": "c2dfa0aa-38b0-4855-9431-311097584d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu2ff4b2qj24", "content": "\ud83e\udd16 CISA added 6 actively exploited flaws to its KEV catalog: MS SQL Server RCE (CVE-2019-1068), Citrix NetScaler overflow (CVE-2026-8452), Linux kernel privesc (CVE-2022-0995), and more.\nhttps://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.html", "creation_timestamp": "2026-08-27T08:08:10.120322Z"}, {"uuid": "1fe4bd02-66ef-47b1-ac3b-720ca39882de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "Telegram/X_1d0-yG-oi_U06TCYscISrX7uTOJhN_Ac53vCygxF1lnQ", "content": "", "creation_timestamp": "2026-08-29T03:00:04.408748Z"}, {"uuid": "761c2421-6d2b-4a29-ae4c-3e106a2cb5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://t.me/reverseame/898", "content": "Discovering an Undisclosed Stack Overflow Vulnerability in Microsoft SQL Server (CVE-2019-1068) https://0xsaiyajin.github.io/vulnerability-research/2021/02/06/discovering-an-undisclosed-stack-overflow-vulnerability-in-mssql-server-cve-2019-1068.html", "creation_timestamp": "2026-07-29T12:02:59.991344Z"}, {"uuid": "76c7481b-2a62-4d1e-8d11-450b3245b1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2019-1068 - A remote code execution vulnerability in ", "creation_timestamp": "2026-08-27T10:00:43.375794Z"}, {"uuid": "0434f907-22d4-45db-b0c2-1802242ac21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mu2m4b6m7l2h", "content": "\ud83d\udea8 Executive Risk Brief: CVE-2019-1068 targets Microsoft SQL Server via remote code execution vectors. Leaders must review asset inventory fidelity, least-privilege RBAC, and network segregation. Read the full CSUITE brief from The Cyber Mind Co. https://thecybermind.co/5am3", "creation_timestamp": "2026-08-27T10:08:30.633344Z"}, {"uuid": "aed214d0-2ef5-40f5-a5e0-8e87d18c8904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "exploited", "source": "Telegram/X_1d0-yG-oi_U06TCYscISrX7uTOJhN_Ac53vCygxF1lnQ", "content": "", "creation_timestamp": "2026-08-30T00:00:55.623709Z"}, {"uuid": "5475ed74-b8bd-4615-99c4-fc4d8c85a463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mugvo6434g2x", "content": "CISA added 6 flaws to its KEV list, including a high-severity Citrix NetScaler flaw (CVE-2019-1068). Evidence shows active exploitation\u2014update and patch ASAP.", "creation_timestamp": "2026-09-01T07:31:31.276344Z"}, {"uuid": "ebd261c9-0cf5-4711-9307-8c7012febdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3muw2kwoiqt25", "content": "Oldest CVEs in this batch: CVE-2015-3246 (Red Hat), CVE-2015-5287 (Red Hat), CVE-2019-1068 (Microsoft), CVE-2021-23758 (Ajax.NET Professional).", "creation_timestamp": "2026-09-07T08:09:07.259650Z"}, {"uuid": "9728b925-fe62-4f2e-9b3c-57e556222e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "Telegram/DP4_saqRW7Y5CPsSDH3mPEsBZ3Fmutc3RzGzO69r_PFbXOY", "content": "", "creation_timestamp": "2026-09-10T09:00:06.728868Z"}, {"uuid": "a78aa374-d394-44ae-bb02-e232224f472b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "published-proof-of-concept", "source": "Telegram/DP4_saqRW7Y5CPsSDH3mPEsBZ3Fmutc3RzGzO69r_PFbXOY", "content": "", "creation_timestamp": "2026-09-11T00:00:45.342339Z"}, {"uuid": "c5d8d7ee-2e8b-4fd0-a880-343683ceba5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvhnrkgzst26", "content": "Oldest CVEs in this batch: CVE-2015-3246 (Red Hat), CVE-2015-5287 (Red Hat), CVE-2019-1068 (Microsoft), CVE-2021-23758 (Ajax.NET Professional).", "creation_timestamp": "2026-09-14T08:08:06.057040Z"}, {"uuid": "da9edc3b-0775-4bd7-a627-3d43d985577d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://t.me/VulnerabilityNews/44179", "content": "CISA Adds Six Known Exploited Vulnerabilities to Catalog\n\nCISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2015-3246 Red Hat Libuser Race Condition Vulnerability\nCVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability\nCVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability\nCVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability\nCVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability\nCVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T12:00:06.579090Z"}, {"uuid": "d1d5025b-7240-4e15-9613-65bff84289fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcisqdrpk2t", "content": "CISA Adds Six Known Exploited Vulnerabilities to Catalog\nRelease Date August 26, 2026\n\nCVE-2015-3246 Red Hat Libuser Race Condition Vulnerability\nCVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability\nCVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerab...", "creation_timestamp": "2026-09-25T00:21:11.012397Z"}, {"uuid": "c7ffeaaf-b856-4623-a8e5-0dd106a81741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1068", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwdtpzggec2z", "content": "CISA\u304cNetScaler\u3001Linux\u3001SQL Server\u306e\u30d0\u30b0\u3092\u542b\u30806\u3064\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u3092KEV\u306b\u8ffd\u52a0\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u6c34\u66dc\u65e5\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV \uff09\u30ab\u30bf\u30ed\u30b0\u306b6\u3064\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3002\u305d\u306e\u4e2d\u306b\u306f\u3001Citrix NetScaler ADC\u3068NetScaler Gateway\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u6df1\u523b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3082\u542b\u307e\u308c\u3066\u304a\u308a\u3001CISA\u306f\u6d3b\u767a\u306a\u60aa\u7528\u304c\u884c\u308f\u308c\u3066\u3044\u308b\u8a3c\u62e0\u304c\u3042\u308b\u3068\u8ff0\u3079\u3066\u3044\u308b\u3002\n\n\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2019-1068 - Microsoft SQL Server \u306b\u304a\u3051\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc...", "creation_timestamp": "2026-09-25T13:09:14.258777Z"}]}