CVE-2019-0708

微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04...

CVE-2019-0708-scan

微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04...

credssp

credssp 这是一个用于利用CVE-2018-0886的概念验证代码。仅用于教育目的。 它依赖于rdpy项目的一个分支https://github.com/preempt/rdpy，同时也支持credssp中继。 由Eyal Karni编写，Preempt公司 [email protected] 构建 说明 Linux 如果您使用的是Ubuntu 14，请检查安装文件。 已在Ubuntu 16.04上测试。 root@kitploit: $ git clone https://github.com/preempt/rdpy.git rdpy $ git clone...

detect_bluekeep.py

detectbluekeep.py Script de Python para detectar la vulnerabilidad Bluekeep - CVE-2019-0708 - con soporte TLS/SSL Trabajo derivado del módulo de Metasploit escrito por @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 tomado de https://github.com/DavidBuchanan314/rc4 Requisitos previos...

aardwolf

🚩 赞助商 如果你喜欢这个项目，可以考虑购买 OctoPwn 的许可证，这是我们完整的、可在浏览器中运行的渗透测试套件！ 如需获取新构建/发布通知和其他信息，请加入我们的 Discord AARDWOLF - 基于 Python 的异步 RDP/VNC 客户端（无头模式） 本项目旨在对 RDP 和 VNC 协议进行探索和实验。 该项目不包含 GUI，如需图形客户端请查看 aardwolfgui 🚩 在浏览器中运行 本项目与许多其他渗透测试工具一样，借助 OctoPwn 的力量在浏览器中运行！ 查看社区版请访问 OctoPwn - Live 重要提示 这是一个无头客户端，如需 GUI...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP 权限提升 📌 本仓库包含关于 CVE-2025-47987 漏洞的分析文档和资源，该漏洞是一个影响 Windows Credential Security Support Provider CredSSP 协议的堆缓冲区溢出 Heap-based Buffer Overflow 缺陷。 📝 描述 该漏洞允许经过身份验证的本地攻击者提升系统权限。该缺陷源于在处理特定 CredSSP 协议数据包时内存管理不当，可能导致： 一个堆缓冲区溢出 或一个整数溢出 Integer Overflow 标识符: CVE-2025-47987...

SUSE CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242

A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure. Mitigation Use FreeRDP with...

Linux Distros Unpatched Vulnerability : CVE-2026-73242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage...

DEBIAN-CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

UBUNTU-CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242

FreeRDP prior to version 3.30.0 is affected. The vulnerability resides in winpr/libwinpr/sspi/Kerberos/kerberos.c within kerberos_DecryptMessage, where the peer-controlled GSS Wrap-token EC field is not bounded before use with RRC in IOV pointer offsets, enabling out-of-bounds reads and in-place ...

CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

EUVD-2026-56935

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...