Lucene search
+L

742 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.15 views

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS6AI score0.12476EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.10 views

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS6AI score0.12476EPSS
SaveExploits0References2
OSV
OSV
added 2019/09/11 10:15 p.m.5 views

CVE-2019-0788

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-1290, CVE-2019-1291...

8.8CVSS7.3AI score0.12476EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/11 10:15 p.m.9 views

CVE-2019-0787

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0788, CVE-2019-1290, CVE-2019-1291...

8.8CVSS7.3AI score0.12476EPSS
SaveExploits0References1
CVE
CVE
added 2019/09/11 9:24 p.m.130 views

CVE-2019-0788

Technical details for CVE-2019-0788 are not provided in the supplied documents. The connected MS blog discusses general endpoint network mitigations and related RDP issues but does not specify affected components, versions, root cause, or fixes for this CVE. Monitor for updates.

9.3CVSS8.8AI score0.12476EPSS
SaveExploits0References1Affected Software3
Talos Blog
Talos Blog
added 2019/09/10 12:12 p.m.106 views

Microsoft Patch Tuesday — Sept. 2019: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 85 vulnerabilities, 19 of which are rated “critical," 65 that are considered "important" and one "moderate." There is also a...

9.3CVSS1.2AI score0.60366EPSS
SaveExploits19
CNVD
CNVD
added 2019/09/10 12:00 a.m.20 views

Microsoft Windows and Microsoft Windows Server Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows and Microsoft Windows...

9.3CVSS8.2AI score0.18982EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2019/08/17 12:00 a.m.15 views

August 17, 2019—KB4512514 (Preview of Monthly Rollup)

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2019/08/14 9:15 p.m.7 views

CVE-2019-1225

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...

7.5CVSS7.2AI score0.09503EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/08/13 12:00 a.m.6 views

PT-2019-2994 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows RDP server affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the Windows RDP server's memory contents. This could allow an attacker to obtain information that could b...

7.8CVSS7.8AI score0.09503EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2019/08/13 12:00 a.m.5 views

PT-2019-6136 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Services affected versions not specified Description: The issue is caused by errors in checking requests to the Remote Desktop Services RDS when connecting via the RDP protocol. Exploitation of this issue may...

10CVSS8.6AI score0.07586EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2019/08/13 12:00 a.m.6 views

PT-2019-2995 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows RDP server affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the Windows RDP server's memory contents. This could allow an attacker to obtain information that could b...

7.8CVSS7.7AI score0.07542EPSS
SaveExploits0References7
zdt
zdt
added 2019/07/15 12:00 a.m.561 views

Microsoft Windows Remote Desktop - (BlueKeep) Denial of Service Exploit

Exploit Title: Bluekeep Denial of Service metasploit module Shodan Dork: port:3389 Date: 07/14/2019 Exploit Author: RAMELLA Sebastien https://github.com/mekhalleh/ Vendor Homepage: https://microsoft.com Version: all affected RDP services by cve-2019-0708 Tested on: Windows XP 32-bits / Windows 7...

9.8CVSS10AI score0.99999EPSS
SaveExploits126
GithubExploit
GithubExploit
added 2019/05/29 9:51 a.m.7 views

Exploit for Use After Free in Microsoft

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" DoS PoC...

10CVSS7.6AI score0.99999EPSS
SaveExploits126
ATTACKERKB
ATTACKERKB
added 2019/05/16 12:00 a.m.250 views

Windows Remote Desktop (RDP) Use-after-free vulnerablility, "Bluekeep"

A bug in Windows Remote Desktop protocol allows unauthenticated users to run arbitrary code via a specially crafted request to the service. This affects Windows 7/Windows Server 2008 and earlier releases. Given the ubiquity of RDP in corporate environments and the trusted nature of RDP, this coul...

10CVSS9.4AI score0.99999EPSS
SaveIn wildExploits126References17
GithubExploit
GithubExploit
added 2019/05/15 8:04 p.m.8 views

Exploit for Use After Free in Microsoft

It is an exploit module for Windows Remote Desktop Service vul...

10CVSS7.2AI score0.99999EPSS
SaveExploits126
CNVD
CNVD
added 2019/05/15 12:00 a.m.13 views

Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Windows 7 is an operating system released by Microsoft.Windows Server 2008 is a server operating system released by Microsoft.Microsoft Windows XP is a popular Windows operating system.Microsoft Windows Server 2003 R2 is a set of server operating systems released by Microsoft Corporatio...

10CVSS9.6AI score0.99999EPSS
SaveExploits126References1
Kitploit
Kitploit
added 2019/02/16 8:41 p.m.199 views

DCOMrade - Powershell Script For Enumerating Vulnerable DCOM Applications

DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is build to work with Powershell 2.0 but will work with all versions above as well. The script currently...

6.9AI score
SaveExploits0References3
CNVD
CNVD
added 2019/02/11 12:00 a.m.16 views

rdesktop out-of-bounds read vulnerability (CNVD-2019-05890)

rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability exists in the rdpdrprocess function in rdesktop 1.8.3 and earlier. An attacker could exploit this vulnerability to obtain information...

7.5CVSS6.8AI score0.03826EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2019/01/04 5:41 p.m.43 views

react-dev-utils on Windows vulnerable to Remote Code Execution

react-dev-utils on Windows is vulnerable to remote code execution. Recommendation Update to one of the following versions, depending on the release line that you are using. - 1.0.4 - 2.0.2 - 3.1.2 - 4.2.2 - 5.0.2 - 6.0.0-next.a671462c...

10CVSS5.6AI score0.02845EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder