1907 matches found
Microsoft Windows Multiple Vulnerabilities (KB5003172)
This host is missing a critical security update according to Microsoft KB5003172 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software allows a hacker to execute arbitrary code or gain full control over the application.
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the improper handling of the drdynvc package. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application using the RDP protocol...
Information disclosure
Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...
CVE-2021-31186 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
KLA12174 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
Lemon Duck Cryptojacking Botnet Changes Up Tactics
The Lemon Duck cryptocurrency-mining botnet has added the ProxyLogon group of exploits to its bag of tricks, targeting Microsoft Exchange servers. That’s according to researchers at Cisco Talos, who said that the cybercrime group behind Lemon Duck has also added the Cobalt Strike attack framework...
UBUNTU-CVE-2021-2279
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful...
The vulnerability of the rdpegfx channel in the implementation of the remote desktop protocol FreeRDP, related to the lack of a mechanism for checking input data, allows a intruder to trigger a service failure.
The vulnerability of the rdpegfx channel in the implementation of the remote desktop protocol FreeRDP is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cyberattacks See Fundamental Changes, A Year into COVID-19
COVID-19-related phishing emails, brute-force attacks on remote workers, and a focus on exploiting or abusing collaboration platforms are the hallmarks of cybercriminal enterprise as the coronavirus marks its first anniversary of going global. A year after the COVID-19 crisis was officially...
The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol allows a intruder to gain access to confidential data and also trigger a service failure.
The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and also cause service failures...
The vulnerability of the glyph_cache_put component in the implementation of the remote desktop protocol FreeRDP, related to reading data beyond the buffer’s acceptable limits, allows an intruder to access confidential data and also causes a service failure.
The vulnerability of the glyphcacheput component in the implementation of the remote desktop protocol FreeRDP is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service...
The vulnerability of the gdi_SelectObject component in the FreeRDP remote desktop protocol allows a attacker to compromise data integrity.
The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
The vulnerability of the FreeRDP remote desktop protocol components, related to reading data beyond the allowed buffer limits, allows attackers to access confidential data and cause service failures.
The vulnerability of the FreeRDP remote desktop protocol implementation relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and also cause service failures...
The vulnerability of the gdi_SelectObject component in the FreeRDP remote desktop protocol allows a hacker to trigger a service failure.
The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the use of a memory area after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the PRIMARY_DRAWING_ORDER_FIELD_BYTES function in the FreeRDP remote desktop protocol implementation involves reading data beyond the allowed buffer limit. This allows attackers to access confidential data and cause service interruptions.
The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...
Remote Desktop Web Access Authentication Timing Attack
!/usr/bin/env python3 -- coding: utf-8 -- standard modules from metasploit import module extra modules DEPENDENCIESMISSING = False try: import base64 import itertools import os import requests except ImportError: DEPENDENCIESMISSING = True Metasploit Metadata metadata = 'name': 'Microsoft RDP Web...
Exploit for Use After Free in Microsoft
微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 DIR . 2019/06/02 02:11 DIR .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04 172,03...
LodaRAT Windows Malware Now Also Targets Android Devices
A previously known Windows remote access Trojan RAT with credential-stealing capabilities has now expanded its scope to set its sights on users of Android devices to further the attacker's espionage motives. "The developers of LodaRAT have added Android as a targeted platform," Cisco Talos...
Cybercriminals Now Using Plex Media Servers to Amplify DDoS Attacks
A new distributed denial-of-service attack DDoS vector has ensnared Plex Media Server systems to amplify malicious traffic against targets to take them offline. "Plex's startup processes unintentionally expose a Plex UPnP-enabled service registration responder to the general Internet, where it ca...
SolarWinds Orion Bug Allows Easy Remote-Code Execution and Takeover
Three serious vulnerabilities have been found in SolarWinds products: Two in the Orion User Device Tracker and one in the Serv-U FTP for Windows product. The most severe of these could allow trivial remote code execution with high privileges. The SolarWinds Orion platform is the network managemen...