CVE-2025-68670

xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability could allow remote...

Punycode Privilege Escalation

The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...