60 matches found
CVE-2025-47987
CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 Questo repository contiene documentazione e risorse di analisi sulla vulnerabilità CVE-2025-47987, un difetto di overflow del buffer nella regione heap Heap-based Buffer Overflow che interessa il protocollo Windows Credential Security Suppo...
CVE-2019-0708
Strumento di rilevamento batch della vulnerabilità remota 3389 di Microsoft CVE-2019-0708 0x001 Rilevamento su Windows root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55...
credssp
credssp यह CVE-2018-0886 का शोषण करने के लिए एक poc कोड है। इसका उपयोग केवल शैक्षिक उद्देश्यों के लिए किया जाना चाहिए। यह rdpy प्रोजेक्ट https://github.com/preempt/rdpy के एक fork पर निर्भर करता है, जो credssp relay की भी अनुमति देता है। Eyal Karni, Preempt द्वारा लिखित [email protected] बिल...
CVE-2019-0708-scan
Strumento di rilevamento batch per la vulnerabilità remota Microsoft 3389 CVE-2019-0708 0x001 Rilevamento su Windows root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,01...
aardwolf
🚩 Patrocinadores Se você gosta deste projeto, considere adquirir licenças do OctoPwn, nossa suíte completa de pentest que roda no seu navegador! Para notificações sobre novos builds/releases e outras informações, entre no nosso Discord AARDWOLF - Cliente RDP/VNC assíncrono em Python headless Este...
detect_bluekeep.py
detectbluekeep.py Python-Skript zur Erkennung der Sicherheitslücke Bluekeep - CVE-2019-0708 - mit TLS/SSL-Unterstützung Arbeit basierend auf dem Metasploit-Modul von @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 übernommen von https://github.com/DavidBuchanan314/rc4 Voraussetzungen...
CVE-2026-73242
A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure. Mitigation Use FreeRDP with...
Linux Distros Unpatched Vulnerability : CVE-2026-73242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage...
DEBIAN-CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
UBUNTU-CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP prior to version 3.30.0 is affected. The vulnerability resides in winpr/libwinpr/sspi/Kerberos/kerberos.c within kerberos_DecryptMessage, where the peer-controlled GSS Wrap-token EC field is not bounded before use with RRC in IOV pointer offsets, enabling out-of-bounds reads and in-place ...
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-72745
A flaw was found in FreeRDP. A malicious peer, either a server or client, can exploit an out-of-bounds vulnerability during CredSSP/NLA authentication. By supplying a large 'extra count' EC value in a Kerberos GSS Wrap token, an attacker can cause the decryption operation to access memory outside...