44 matches found
lab-cve-2020-0610
CVE-2020-0610 BlueGate 实验室 - Windows RD Gateway UDP/DTLS RCE Nuclei PR：https://github.com/projectdiscovery/nuclei-templates/pull/13076 针对 CVE-2020-0610 （BlueGate）的完整可复现实验室环境，这是一个影响 Microsoft Windows 远程桌面网关（RD Gateway）的严重预认证远程代码执行漏洞。该实验室使安全研究人员能够使用最小化、非破坏性的 DTLS 握手技术安全地测试和验证此漏洞。 🎯 漏洞概述 CVE-2020-06...
BlueGate-CVE-2020-0609
Validador BlueGate de RD Gateway Herramienta de Validación Remota CVE-2020-0609 / CVE-2020-0610 Una pequeña utilidad Python solo de verificación para validar remotamente el comportamiento del parche asociado con las vulnerabilidades de Microsoft Remote Desktop Gateway: CVE-2020-0609 CVE-2020-0610...
BlueGate
BlueGate 针对 CVE-2020-0609 和 CVE-2020-0610 的概念验证（拒绝服务 + 扫描器）。 这些漏洞允许未认证的攻击者通过 RD Gateway for RDP 以最高权限实现远程代码执行。 请仅用于研究和教育目的。 使用方式 确保已为 python3 安装 pyOpenSSL。 usage: BlueGate.py -h -M check,dos -P PORT host positional arguments: host 主机 IP 地址 optional arguments: -h, --help 显示此帮助信息并退出 -M check,dos,...
cve-2025-24035-rds-websocket-dos-test
CVE-2025-24035 WebSocket压力测试（安全） 🚨 免责声明 ：这不是漏洞利用。此脚本仅用于模拟，仅应在安全实验室环境中用于教育目的。 目的 此测试发送一个故意过大的WebSocket头部，以模拟针对RD网关服务（如受CVE-2025-24035影响的服务）的畸形请求。 法律声明 ⚠️ 未经明确授权，请勿针对任何系统使用此工具。未经授权的使用可能违法。 使用方法 python3 testabnormalrdswebsocket.py 根据本地实验室设置修改脚本中的IP地址。...
CVE-2026-91960
A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the StreamEnsureRemainingCapacity function, leading to an integer wraparound and a...
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's StreamEnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer...
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length, triggering integer wraparound that leads to a double free and crashes the FreeR...
PT-2026-92079
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An integer overflow exists in the Stream EnsureRemainingCapacity function within WinPR. A remote attacker acting as a malicious RD Gateway peer can send a WebSocket Ping frame containing a crafted...
Exploit for CVE-2020-0609
RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-06...
FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses
A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS...
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
CVE-2026-67297
FreeRDP prior to 3.29.0 contains a flaw in http_response_recv_body() where RESPONSE_SIZE_LIMIT is not enforced for Transfer-Encoding: chunked HTTP responses. This allows an attacker controlling a malicious RD Gateway endpoint to send oversized chunked bodies, exhausting memory on the client. Impa...
CVE-2026-67297: Allocation of Resources Without Limits or Throttling
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
Windows Remote Desktop Gateway RCE (CVE-2020-0609)
A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...
CVE-2024-38015: Uncontrolled Resource Consumption
Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...
