5709 matches found
RDP abused for DDoS attacks
We have talked about RDP many times before. It has been a popular target for brute force attacks for a long time, but attackers have now found a new way to abuse it. Remote access has become more important during the pandemic, with as many people as possible try to work from home. Which makes it...
Nefilim Ransomware Gang Hits Jackpot with Ghost Account
A Nefilim ransomware attack that locked up more than 100 systems stemmed from the compromise of an unmonitored account belonging to an employee who had died three months previously, researchers said. Nefilim a.k.a. Nemty is a ransomware strain that emerged in 2020, with its operators adopting the...
Unspecified Vulnerability in Apache Guacamole
Apache Guacamole is a clientless remote desktop gateway from the Apache USA Foundation. The product supports protocols such as VNC, RDP and SSH. An information disclosure vulnerability exists in Apache Guacamole 1.2.0 and earlier versions, which stems from the fact that if multiple users share...
The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the remote desktop service for Windows operating systems allows attackers to circumvent existing security restrictions and gain unauthorized access to the application.
The vulnerability of the remote desktop service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to the application...
Cybercriminals want your cloud services accounts, CISA warns
On January 13 the Cybersecurity and Infrastructure Security Agency CISA issued a warning about several recent successful cyberattacks on various organizations’ cloud services. What methods did the attackers use? In the initial phase, the victims were targeted by phishing emails trying to capture...
Denial of Service Vulnerability in TIA Protal (CNVD-2021-05551)
TIA Protal SmartClient.exe is a client component for remote desktop connections provided with TIA Protal products. A denial of service vulnerability exists in TIA Protal that can be exploited by an attacker to cause a denial of service...
The vulnerability of the fly-qdm graphical interface is related to the default access settings, which allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the fly-qdm graphical shell is related to the access rights settings when connecting via RDP for a user whose graphical console mode is enabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...
CVE-2021-1669
Windows Remote Desktop Security Feature Bypass Vulnerability...
CVE-2021-1674
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...
CVE-2021-1669
Windows Remote Desktop Security Feature Bypass Vulnerability...
CVE-2021-1674
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...
Security feature bypass
Windows Remote Desktop Security Feature Bypass Vulnerability...
Security feature bypass
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...
CVE-2021-1674 Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
...
CVE-2021-1674
Technical details (affected product, root cause, impact, or remediation) are not provided in the connected documents. The CVE entry’s specifics are not disclosed here; monitor for updates.
CVE-2021-1669
CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...
CVE-2021-1669 Windows Remote Desktop Security Feature Bypass Vulnerability
...
