PyNightmare

PyNightmare CVE-2021-36934일명 HiveNightmare/SeriousSAM에 대한 PoC로, 전적으로 python3로 작성되었습니다. 설명 CVE-2021-36934는 @jonasLyk가 발견한 최근 발견된 취약점으로, 비관리자 사용자가 해시와 같은 매우 민감한 정보를 포함하는 모든 레지스트리 하이브를 복사할 수 있게 하여 권한 상승으로 이어질 수 있습니다. 영감 HiveNightmare 취약점에 대한 간단한 PoC로, @GossiTheDog에게서 영감을 받았습니다. 범위 시스템 보호가 활성화된 모든...

iberyanbytes

Iberyanbytes Outil d'énumération AD, qui permet de récupérer des informations liées au réseau et de collecter des données sur les interfaces réseau, la configuration IP, le DNS et les tables de routage. Il énumère les partages réseau et analyse les permissions des partages, recueille des détails...

ShadowSteal

ShadowSteal | CVE-2021-36934 Implémentation pure Nim pour exploiter CVE-2021-36934, la vulnérabilité SeriousSAM d'élévation de privilèges locaux LPE. Pas sûr pour l'OPSEC... pour l'instant ;. Je ne revendique pas la découverte de cette exploitation. Démarrage rapide Construire avec Docker Démarre...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server-side authentication against a SAM file might succeed with invalid credentials if the server had configured an invalid SAM file path. Clients based on FreeRDP are not affected by this issue. However...

EUVD-2022-29651

Malicious code in bioql PyPI...

OSV-2025-729 UNKNOWN READ in sam_hrecs_free_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444492076 Crash type: UNKNOWN READ Crash state: samhrecsfreetags samhrecsparsesingleline samhdrbuildfromsamfile...

Improper Authentication

libfreerdp.so is vulnerable to Improper Authentication. The vulnerability is due to invalid credentials being accepted if the server has configured an invalid SAM file path. The attacker can successfully authenticate with invalid credentials if the SAM file path is incorrect...

Debian dla-3654 : freerdp2-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3654 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3654-1 [email protected]...

SUSE CVE-2022-24883

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server...

GLSA-202210-24 : FreeRDP: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-24 FreeRDP: Multiple Vulnerabilities - FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fai...

MGASA-2022-0383 Updated freerdp packages fix security vulnerability

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...

SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2354-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2354-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...

SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2353-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2353-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...

SUSE SLED12 / SLES12 Security Update : freerdp (SUSE-SU-2022:2352-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2352-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...

SUSE-SU-2022:2352-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM bsc1198919. - CVE-2022-24883: Fixed authentication against invalid SAM files bsc1198921...

EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2022-1927)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file migh...

USN-5461-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled empty password values. A remote attacker could use this issue to bypass server authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. CVE-2022-24882 It was discovered that FreeRDP incorrectly handled server...

OESA-2022-1657 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0,...

CVE-2022-24883

A vulnerability was found in freerdp. This flaw occurs when the server-side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. This issue exposes an improper authenticating vulnerability...

CVE-2022-24883

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server...