60 matches found
credssp
credssp यह CVE-2018-0886 का शोषण करने के लिए एक poc कोड है। इसका उपयोग केवल शैक्षिक उद्देश्यों के लिए किया जाना चाहिए। यह rdpy प्रोजेक्ट https://github.com/preempt/rdpy के एक fork पर निर्भर करता है, जो credssp relay की भी अनुमति देता है। Eyal Karni, Preempt द्वारा लिखित [email protected] बिल...
CVE-2019-0708-scan
Ferramenta de detecção em lote para vulnerabilidade remota 3389 da Microsoft CVE-2019-0708 0x001 Detecção no Windows root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,01...
CVE-2025-47987
CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 Este repositório contém documentação e recursos de análise sobre a vulnerabilidade CVE-2025-47987, uma falha de estouro de buffer na região heap Heap-based Buffer Overflow que afeta o protocolo Windows Credential Security Support Provider...
CVE-2019-0708
أداة الكشف الجماعي عن ثغرة RDP CVE-2019-0708 في Microsoft 3389 0x001 الكشف تحت Windows root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02...
aardwolf
🚩 Patrocinadores Se você gosta deste projeto, considere adquirir licenças do OctoPwn, nossa suíte completa de pentest que roda no seu navegador! Para notificações sobre novos builds/releases e outras informações, entre no nosso Discord AARDWOLF - Cliente RDP/VNC assíncrono em Python headless Este...
detect_bluekeep.py
detectbluekeep.py Script Python para detectar a vulnerabilidade bluekeep - CVE-2019-0708 - com suporte a TLS/SSL Trabalho derivado do módulo Metasploit escrito por @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 retirado de https://github.com/DavidBuchanan314/rc4 Pré-requisitos O...
CVE-2026-73242
A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure. Mitigation Use FreeRDP with...
Linux Distros Unpatched Vulnerability : CVE-2026-73242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage...
DEBIAN-CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
UBUNTU-CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP prior to version 3.30.0 is affected. The vulnerability resides in winpr/libwinpr/sspi/Kerberos/kerberos.c within kerberos_DecryptMessage, where the peer-controlled GSS Wrap-token EC field is not bounded before use with RRC in IOV pointer offsets, enabling out-of-bounds reads and in-place ...
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-72745
A flaw was found in FreeRDP. A malicious peer, either a server or client, can exploit an out-of-bounds vulnerability during CredSSP/NLA authentication. By supplying a large 'extra count' EC value in a Kerberos GSS Wrap token, an attacker can cause the decryption operation to access memory outside...