rustdesk

Build • Docker • Structure • Screenshots Українська | česky | 中文 | Magyar | Español | فارسی | Français | Deutsch | Polski | Indonesian | Suomi | മലയാളം | 日本語 | Nederlands | Italiano | Русский | Português Portugal | Português Brasil | Esperanto | 한국어 | العربي | Tiếng Việt | Dansk | Ελληνικά | Türk...

CVE-2026-30784-rustdesk-poc

CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs Traffic Amplification PoC & PCAP Analysis Key Findings Key Finding: Enforcing key-based authentication -k does not prevent this amplification attack, because the amplification response is triggered during the unauthenticated initial...

EUVD-2026-102482

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324 rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324

The rustdesk-api through version 2.7 is vulnerable to an authorization bypass via the POST /api/sysinfo endpoint. This flaw allows unauthenticated attackers to overwrite existing peer records, including hostname, username, OS, and uuid , by providing only a target device ID without uuid verificat...

CVE-2026-111324 rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

exploitarium

https://discord.gg/WytKH65ZR unitevi per ricerca, aiuto, documentazione e altre informazioni utili per gli interessati. Dichiarazione Questo repository era incompleto al momento della pubblicazione. Per quanto riguarda l'uso dell'IA, il mio flusso di lavoro di fuzzing è stato automatizzato dall'I...

CVE-2026-57850

Summary RustDesk sessions are authorized for a specific connection type — Remote full desktop control, FileTransfer, PortForward, ViewCamera, or Terminal. Before 1.4.9, the server's post-authorization message gate only checked one boolean, self.authorized, and never re-checked it against the...

CVE-2026-100388

RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux and macOS. Authenticated remote peers with disabled file transfer permissions can place files onto the host clipboard and retrieve copied...

CVE-2026-100417

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

CVE-2026-100417 RustDesk before 1.5.0 One-Way File Transfer Bypass

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

CVE-2026-100417

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

CVE-2026-100417

RustDesk versions before 1.5.0 on Windows are vulnerable to a bypass of the one-way file transfer option. The root cause is a failure to enforce this restriction against peer clipboard file requests, which allows authenticated peers to read files from the host clipboard. An attacker can retrieve ...

CVE-2026-100417 RustDesk before 1.5.0 One-Way File Transfer Bypass

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

EUVD-2026-87353

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

CVE-2026-100417 RustDesk before 1.5.0 One-Way File Transfer Bypass

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

CVE-2026-100388 RustDesk before 1.5.0 Missing Authorization Check on Incoming File Clipboard Messages

RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux and macOS. Authenticated remote peers with disabled file transfer permissions can place files onto the host clipboard and retrieve copied...

EUVD-2026-87325

RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux and macOS. Authenticated remote peers with disabled file transfer permissions can place files onto the host clipboard and retrieve copied...

CVE-2026-100388

RustDesk versions before 1.5.0 are vulnerable on Linux and macOS due to a failure to properly validate file transfer permissions within the Cliprdr message handler . This flaw allows authenticated remote peers to bypass disabled file transfer permissions to place files onto the host clipboard or ...