327 matches found
CVE-2023-43826
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be...
CVE-2023-30575
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data...
CVE-2023-30576
Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process...
CVE-2024-35164
The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If a malicious user has access to a text-based connection, a specially-crafted sequence of console codes could allow arbitrary code to be...
redStack
redStack Attending DEF CON 34? Click here to see presentation times and the prerequisites needed for the workshop. A red-team operator stack on AWS, up in 45 minutes: three C2 frameworks Mythic, Sliver, Adaptix, an Apache redirector, Kali and Windows workstations, and a Guacamole portal, across t...
[SECURITY] Fedora 45 Update: guacamole-server-1.6.0-9.fc45
Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop protoc ols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...
Apache Guacamole - Default Credentials Detection
Tries guacadmin:guacadmin against /api/tokens and looks for authToken in a JSON 200 response. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Guacamole default credentials guacadmin/guacadmin.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
Apache Guacamole Login Page and version detection
Detects Apache Guacamole Login Page and version detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Guacamole Login Page and version detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apach...
GHSA-MX76-R943-RF8G vulnerabilities
Vulnerabilities for packages: opensearch, guacamole-client, keycloak-fips, wazuh-indexer, bouncycastle-fips, geoserver...
CVE-2026-8149 vulnerabilities
Vulnerabilities for packages: opensearch, guacamole-client, keycloak-fips, wazuh-indexer, bouncycastle-fips, geoserver...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2023-4863 — Laboratorio de explotación de libwebp Reprodu...
GHSA-VF5J-865M-MQ7C vulnerabilities
Vulnerabilities for packages: apache-hop-fips, guacamole-client, apache-nifi, apache-hop, jenkins...
CVE-2026-42779 vulnerabilities
Vulnerabilities for packages: apache-hop-fips, guacamole-client, apache-nifi, apache-hop, jenkins...
GHSA-C3FC-8QFF-9HWX vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, kayenta-fips, druid, ruby4.0-bouncy-castle-java, logstash-fips, logstash, kayenta, thingsboard, geoserver, pinot-fips, ruby3.2-bouncy-castle-java, commercial-elasticsearch, jenkins, jruby, hono, nacos-docker, elasticsearch, camunda,...
CVE-2026-0636 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, kayenta-fips, druid, ruby4.0-bouncy-castle-java, logstash-fips, logstash, kayenta, thingsboard, geoserver, pinot-fips, ruby3.2-bouncy-castle-java, commercial-elasticsearch, jenkins, jruby, hono, nacos-docker, elasticsearch, camunda,...
Apache Guacamole Unvalidated Array Indexing
The vulnerability of Apache Guacamole, a software for remote administration of client machines, is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
ROS-20251216-7309
Vulnerability in guacamole-server related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
ROS-20251216-7308
Vulnerability in guacamole related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
