CVE-2025-68670

xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability could allow remote...

The vulnerability of the Punycode character transformation method, which is used to process domain names, allows attackers to increase their privileges.

The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...