BlueGate

BlueGate PoC per la vulnerabilità del Remote Desktop Gateway - CVE-2020-0609 & CVE-2020-0610. Grazie a ollypwn per aver segnalato il mio sciocco errore! Installazione Sto usando una versione patchata di pydtls perché il repository originale non si compilava correttamente. root@kitploit: cd pydtls...

RDGScanner

Scanner per CVE-2020-0609 e CVE-2020-0610 Un scanner proof-of-concept per verificare la presenza delle vulnerabilità CVE-2020-0609 e CVE-2020-0610 su un server gateway RDP. Testato su: Windows Server 2012 x64 Windows Server 2016 x64 Windows Server 2019 x64 Dichiarazione di non responsabilità La...

rdg_scanner_cve-2020-0609

Scansione dei Remote Desktop Gateway potenzialmente non patchati CVE-2020-0609 e CVE-2020-0610 Lo scanner ha 2 modalità di funzionamento: Controllo dei sistemi vulnerabili a CVE-2020-0609 su UDP 3391 Utilizza il codice di scansione delle vulnerabilità di https://github.com/MalwareTech/RDGScanner...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner per CVE-2020-0609 e CVE-2020-0610. Queste vulnerabilità consentono a un attaccante non autenticato di ottenere l'esecuzione remota di codice con i privilegi più elevati tramite RD Gateway per RDP. Si prega di utilizzarlo solo per scopi di...

EUVD-2026-0609

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

CVE-2025-0609

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS. This issue affects Logo Cloud: before 1.18...

Windows Remote Desktop Gateway RCE (CVE-2020-0609)

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...

CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability'. This CVE ID...

CVE-2009-0609

Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle 1 a long value in an ADD or 2 long string attributes, which allows remote attackers to cause a denial of service JDBC backend...

RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1132)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1132 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. MariaD...

WordPress WP ERP Plugin <= 1.12.9 is vulnerable to Cross Site Scripting (XSS)

Software WP ERP Type Plugin Vulnerable versions = 1.12.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0609 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 78bf5e397b34 Credits Krzysztof Zając Required...

CVE-2024-0609

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apikey' parameter in all versions up to, and including, 1.13.1 due to insufficient input sanitization and output escaping. Th...

CVE-2024-0609 WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apikey' parameter in all versions up to, and including, 1.13.1 due to insufficient input sanitization and output escaping. Th...

Oracle Linux 8 : thunderbird (ELSA-2024-0609)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-0609 advisory. 115.7.0-1.0.1 - Update to 115.7.0 build1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

RHEL 8 : git (RHSA-2023:0609)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0609 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

CVE-2023-0609

creationtimestamp| type| source ---|---|--- 2023-02-01 14:13:59+00:00| seen| https://t.me/cibsecurity/57280 2025-03-26 20:25:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8958...

CVE-2023-0609 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0609 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0609

wallabag prior to 2.5.3 contains an Improper Authorization vulnerability via the export feature that allows insecure direct object reference (IDOR) to view other users’ entries. Root cause: missing ownership validation in the export/download path (exportEntry). Impact: potential exposure of user ...

Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability

Search giant Google on Friday released an out-of-band security update to fix a new actively exploited zero-day flaw in its Chrome web browser. The high-severity flaw, tracked as CVE-2022-4262, concerns a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's Threat Analysis...