Lucene search
+L

5709 matches found

RedHat Linux
RedHat Linux
added 2026/08/31 12:55 p.m.8 views

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

8.7CVSS5.9AI score0.00346EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/31 12:44 p.m.5 views

CVE-2024-38077

CVE-2024-38077 Here’s a possible GitHub description for CVE-2024-38077: CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service Overview: CVE-2024-38077 is a critical vulnerability in the Windows Remote Desktop Licensing Service, which allows remote attacke...

9.8CVSS8.6AI score0.84112EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 5:39 a.m.3 views

CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense - Complete Exploitation Framework 📚 Technical Documentation for Presentation This document explains each component of the framework, why it exists , and how the heap buffer overflow exploitation works in modern Windows. 🎯 What Is CVE-2024-38077? The Vulnerability Windows...

9.8CVSS8.6AI score0.84112EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/30 4:55 p.m.4 views

Wincrash

Wincrash root@kitploit: I'm not responsible for what you use this to accomplish and should only be used for education purposes. CVE-2019-0708 - when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code...

10CVSS7.8AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/08/29 1:43 p.m.11 views

RDP_jammer

RDPjammer CVE-2012-0152 exploit utilizzando metasploit e BASH SINTASSI : Script.sh...

4.3CVSS7.4AI score0.86262EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.11 views

Devolutions Remote Desktop Manager 2026.1.x < 2026.1.25.0 / 2026.2.x < 2026.2.18.0 Insufficient Data Authenticity Verification (CVE-2026-78417)

The version of Devolutions Remote Desktop Manager installed on the remote host is 2026.1.x prior to 2026.1.25.0 or 2026.2.x prior to 2026.2.18.0. It is, therefore, affected by a vulnerability: - Insufficient verification of data authenticity in the IronVNC client allows an on-path attacker to...

4.3CVSS5.9AI score0.00106EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/26 9:40 a.m.8 views

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

9.8CVSS8.2AI score0.00397EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/24 7:17 p.m.9 views

CVE-2026-78417

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES...

4.3CVSS0.00106EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 6:26 p.m.32 views

CVE-2026-78417

Devolutions Remote Desktop Manager versions 2026.2.17.0 and earlier, and 2026.1.24.0 and earlier, contain a vulnerability in the IronVNC client due to insufficient verification of data authenticity . During RSA-AES authentication , the client automatically accepts the server's RSA key without pro...

4.3CVSS5.3AI score0.00106EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 6:26 p.m.9 views

EUVD-2026-65063

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES...

5.5AI score0.00106EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 6:26 p.m.35 views

CVE-2026-78417

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES...

0.00106EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfAppUpdateWindowFromSurface reused a cached XImage, where the data pointer referred to an RDPGFX surface buffer that had been freed. This was because gdiDeleteSurface freed surface-data without invalidating...

9.8CVSS5.9AI score0.00498EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory was rendered to the screen, potentially exposing sensitive data to attackers. This issue has been fixed in version 3.24.2...

7.1CVSS6.2AI score0.00205EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.18 views

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login interface to remote machines using the Microsoft Remote Desktop Protocol RDP. Version 0.9.21 and earlier of xrdp contain an integer overflow in the xrdpmmprocessrailupdatewindowtext function. There are no known solutions to this issue...

9.8CVSS6.9AI score0.00724EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.18 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in the persistentcachereadentryv3 function in libfreerdp/cache/persistent.c, persistent-bmpSize was updated before winpralignedrecalloc. If realloc fails, bmpSize is inflated while bmpData points to the old...

7.1CVSS6.2AI score0.001EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, there was an integer underflow issue in the updatereadcachebitmaporder function of FreeRDP’s core library. This vulnerability has been fixed in version 3.24.0...

3.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.16 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, there was a race in the serial channel IRP thread tracking that allowed for a heap use-after-free condition when one thread removed an entry from serial-IrpThreads while another read it. This vulnerability h...

8.1CVSS7AI score0.00298EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a heap out-of-bounds read occurred in the smartcard SetAttrib path when cbAttrLen did not match the actual NDR buffer length. This vulnerability has been fixed in version 3.20.1...

9.1CVSS5.5AI score0.00787EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.20 views

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Clients and servers that use versions of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read vulnerabilities. Versions 3.5.0 and 2.11.6 address this issue. There are no known workarounds available...

9.8CVSS8AI score0.0372EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server could trigger a heap buffer overflow in FreeRDP clients by using the GDI surface pipeline e.g., xfreerdp to send an RDPGFX ClearCodec surface command with an out-of-bounds destination...

8.8CVSS6.1AI score0.00537EPSS
SaveExploits1References2
Rows per page
Query Builder