Exploit for Use After Free in Microsoft

This is a PoC exploit for CVE-2019-0708, a vulnerability in Microsoft Remote Desktop. The tool, named rdpscan, is designed to scan networks for vulnerable machines. It is based on the rdesktop patch from https://github.com/zerosum0x0/CVE-2019-0708. The tool can be compiled on Windows, macOS, and...

UBUNTU-CVE-2020-13398

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB write vulnerability has been detected in cryptorsacommon in libfreerdp/crypto/crypto.c...

The Windows 7 Postmortem: What’s at Stake

In January 2020, Microsoft officially ended its extended support and discontinued patching of Windows 7. Despite the long lead time and repeated reminders, numbers since the COVID-19 pandemic have shown a slight uptick in Windows 7 deployments. The recent estimates show that more than 26 percent ...

ProLock Ransomware Teams Up With QakBot Trojan to Infect Victims

A relatively new ransomware, ProLock, has paired up with the QakBot banking trojan to access victims’ networks. ProLock’s leveraging of QakBot gives it bolstered persistence, anti-detection and credential-dumping techniques. ProLock ransomware first emerged in March as a successor to another rece...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-28990)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

FreeRDP Input Validation Error Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP is vulnerable to an input validation error. The vulnerability stems from a network system or product that does not properly validate incoming data. An attacker can exploit the vulnerability ...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-28989)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-28992)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-29356)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resultin...

Microsoft Windows Multiple Vulnerabilities (KB4556813)

This host is missing a critical security update according to Microsoft KB4556813 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-29357)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP Buffer Overflow Vulnerability. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

Blue Mockingbird Monero-Mining Campaign Exploits Web Apps

A Monero cryptocurrency-mining campaign has emerged that exploits a known vulnerability in public-facing web applications built on the ASP.NET open-source web framework. The campaign has been dubbed Blue Mockingbird by the analysts at Red Canary that discovered the activity. Research uncovered th...

Millions of Brute-Force Attacks Hit Remote Desktop Accounts

A rash of brute-forcing attempts aimed at users of Microsoft’s proprietary Remote Desktop Protocol RDP has come to light, striking millions per week. The attacks are a likely offshoot of cybercriminals looking to take advantage of the unprecedented numbers of employees working from home amid the...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26302)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26304)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

Update to support RDP restricted administration for Windows 8 and Windows Server 2012

Update to support RDP restricted administration for Windows 8 and Windows Server 2012 About this update This Remote Desktop Protocol RDP update lets users use Remote Desktop Connection without sending their credentials to the remote computer. This helps prevent credential and credential hash thef...

Update for RDC 7.1 to support restricted administration logons on Windows 7 and Windows Server 2008 R2

Update for RDC 7.1 to support restricted administration logons on Windows 7 and Windows Server 2008 R2 About this update This Remote Desktop Protocol RDP 7.1 update enables the Remote Desktop Connection client to perform restricted administration logons. It also enables the Remote Desktop Service...

Update for RDP 8.1 is available for Windows 7 SP1

Update for RDP 8.1 is available for Windows 7 SP1 Summary This article describes an update for the Remote Desktop Protocol RDP 8.1 in Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update package provides the following improvements: Fixes connection reliability issues. Provides...

TrickBot Now Exploits Infected PCs to Launch RDP Brute Force Attacks

A new module for TrickBot banking Trojan has recently been discovered in the wild that lets attackers leverage compromised systems to launch brute-force attacks against selected Windows systems running a Remote Desktop Protocol RDP connection exposed to the Internet. The module, dubbed "rdpScanDl...

Exploit for Use After Free in Microsoft

This repository is a PoC Proof of Concept scanner for the CVE-2019-0708 vulnerability, also known as "BlueKeep", which is a remote code execution RCE vulnerability in Microsoft Windows Remote Desktop Services. The scanner is a fork of the rdesktop client, a Remote Desktop Protocol client, and is...