162 matches found
BlueGate
BlueGate 원격 데스크톱 게이트웨이 취약점CVE-2020-0609 & CVE-2020-0610에 대한 PoC입니다. 제 실수를 지적해 준 ollypwn님께 감사드립니다! 설정 원래 저장소가 제대로 빌드되지 않아 패치된 버전의 pydtls를 사용하고 있습니다. root@kitploit: cd pydtls sudo python setup.py install 서비스 거부DoS DoS 공격에 대한 PoC는 dos.py에서 찾을 수 있습니다. 이는 기본적으로 원격 데스크톱 게이트웨이 서비스를 중단시킵니다. 초기 PoC는 커밋 또는...
rdg_scanner_cve-2020-0609
원격 데스크톱 게이트웨이 스캔 패치되지 않은 CVE-2020-0609 및 CVE-2020-0610 가능성 스캐너는 2가지 작동 모드가 있습니다: UDP 3391에서 CVE-2020-0609에 취약한 시스템 확인 https://github.com/MalwareTech/RDGScanner 의 취약점 스캔 코드를 사용합니다. 면책 조항 메모리 손상 취약점 스캔은 위험하며 시스템을 중단시킬 수 있습니다. 이 도구는 충돌을 방지하도록 설계되었지만 안정성을 100% 보장할 수는 없습니다. 사용에 따른 책임은 본인에게 있으며 테스트 권한이...
CVE-2026-69338
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69292
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73225
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69338
CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...
CVE-2026-69292
A double free vulnerability in the Remote Desktop Gateway Service (Microsoft) allows an authorized local attacker to elevate privileges . The flaw requires local access with low privileges and high attack complexity , but grants full compromise of confidentiality, integrity, and availability upon...
EUVD-2026-73214
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
CVE-2026-67297
A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, FreeRDP clients should only connect to trusted Remote...
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
UBUNTU-CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
SUSE CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggers a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABR...
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggers a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABR...
EUVD-2025-14445
Malicious code in bioql PyPI...
EUVD-2024-43764
Malicious code in bioql PyPI...
EUVD-2025-10183
Malicious code in bioql PyPI...
EUVD-2025-10168
Malicious code in bioql PyPI...
EUVD-2025-2292
Malicious code in bioql PyPI...