44 matches found
lab-cve-2020-0610
CVE-2020-0610 BlueGate Lab - Windows RD Gateway UDP/DTLS RCE Nuclei PR: https://github.com/projectdiscovery/nuclei-templates/pull/13076 CVE-2020-0610BlueGate을 위한 포괄적인 재현 가능한 실험실 환경입니다. 이는 Microsoft Windows RD Gateway원격 데스크톱 게이트웨이의 심각한 사전 인증 원격 코드 실행 취약점입니다. 이 실험실은 보안 연구원들이 최소한의 비파괴적 DTLS 핸드셰이크 기법...
BlueGate-CVE-2020-0609
RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-0610 — инструмент удалённой проверки Небольшая Python-утилита только для проверки , предназначенная для удалённой валидации поведения патчей, связанных с уязвимостями Microsoft Remote Desktop Gateway: CVE-2020-0609 CVE-2020-0610 Данные...
BlueGate
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. Эти уязвимости позволяют неаутентифицированному злоумышленнику получить удаленное выполнение кода с максимальными привилегиями через RD Gateway для RDP. Пожалуйста, используйте только в исследовательских и...
cve-2025-24035-rds-websocket-dos-test
CVE-2025-24035 Test de stress WebSocket Sûr 🚨 AVERTISSEMENT : Ceci n'est PAS une exploitation. Ce script est une simulation et ne doit être utilisé qu'à des fins éducatives dans un environnement de laboratoire sécurisé. Objectif Ce test envoie un en-tête WebSocket délibérément surdimensionné pour...
CVE-2026-91960
A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the StreamEnsureRemainingCapacity function, leading to an integer wraparound and a...
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's StreamEnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer...
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length, triggering integer wraparound that leads to a double free and crashes the FreeR...
PT-2026-92079
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An integer overflow exists in the Stream EnsureRemainingCapacity function within WinPR. A remote attacker acting as a malicious RD Gateway peer can send a WebSocket Ping frame containing a crafted...
Exploit for CVE-2020-0609
RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-06...
FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses
A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS...
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
CVE-2026-67297
FreeRDP prior to 3.29.0 contains a flaw in http_response_recv_body() where RESPONSE_SIZE_LIMIT is not enforced for Transfer-Encoding: chunked HTTP responses. This allows an attacker controlling a malicious RD Gateway endpoint to send oversized chunked bodies, exhausting memory on the client. Impa...
CVE-2026-67297: Allocation of Resources Without Limits or Throttling
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
Windows Remote Desktop Gateway RCE (CVE-2020-0609)
A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...
CVE-2024-38015: Uncontrolled Resource Consumption
Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...
