CVE-2020-0609

CVE-2020-0609 is a pre-auth remote code execution flaw in Windows Remote Desktop Gateway (RD Gateway). An unauthenticated attacker can trigger code execution by sending specially crafted UDP packets to UDP/3391, enabling remote compromise of RD Gateway when UDP transport is enabled. Multiple conn...

CVE-2020-0610

CVE-2020-0610 is a Windows RD Gateway vulnerability (BlueGate) that enables unauthenticated remote code execution over UDP/3391. The RD Gateway role with UDP transport enabled is affected; exploitation targets the gateway service via specially crafted UDP traffic, enabling full compromise (per th...

Critical Vulnerabilities in Microsoft Windows Operating Systems

Summary New vulnerabilities are continually emerging, but the best defense against attackers exploiting patched vulnerabilities is simple: keep software up to date. Timely patching is one of the most efficient and cost-effective steps an organization can take to minimize its exposure to...

Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...

Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...

KB4534309: Windows 8.1 and Windows Server 2012 R2 January 2020 Security Update

The remote Windows host is missing security update 4534309 or cumulative update 4534297. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully...

KLA11639 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, bypass security restrictions, spoof user interface, cause denial of service. Below is a complete list of...

CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka ‘Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability’. This CVE ID...

CVE-2020-0612: Undefined Security Weakness

A denial of service vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability'...

CVE-2020-0609: Undefined Security Weakness

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability'. This CVE ID...

CVE-2020-0610: Undefined Security Weakness

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability'. This CVE ID...

Joomla RD e-Tickets TicketMasterExt 3.5.7 SQL Injection

Exploit Title : Joomla RD e-Tickets TicketMasterExt Components 3.5.7 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : rd-media.org Software Download Link : rd-media.org/downloads/category/rd-etickets.html Software...

rd-bausanierung.de XSS vulnerability

Open Bug Bounty ID: OBB-602220 Description| Value ---|--- Affected Website:| rd-bausanierung.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rd-service.ru XSS vulnerability

Open Bug Bounty ID: OBB-582514 Description| Value ---|--- Affected Website:| rd-service.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rd-ebusiness.com XSS vulnerability

Open Bug Bounty ID: OBB-564056 Description| Value ---|--- Affected Website:| rd-ebusiness.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

trc.taboola.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-562228 Description| Value ---|--- Affected Website:| trc.taboola.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Multiple Westermo Routers Hardcoded Password Vulnerability

The RD-305-DIN, MRD-315, MRD-355, and MRD-455 are all Westermo router devices. Multiple Westermo routers are vulnerable to a hard-coded password vulnerability where the device uses a hard-coded special key that allows an attacker to decrypt traffic from any other source...

Multiple Westermo Routers Hardcoded for Unauthorized Access Vulnerability

The RD-305-DIN, MRD-315, MRD-355, and MRD-455 are all Westermo router devices. Multiple Westermo routers have a hard-coded unauthorized access vulnerability, where the device uses hard-coded credentials that allow a local attacker to exploit the vulnerability to gain unauthorized access to the...

Multiple Westermo Router Spoofing Vulnerabilities

The RD-305-DIN, MRD-315, MRD-355, and MRD-455 are all Westermo router devices. A spoofing vulnerability exists in multiple Westermo routers, where an attacker could potentially spoof a user into making a malicious request to a server because the program does not verify that the user intended to...

rd-car.be Open Redirect vulnerability

Vulnerable URL: http://www.rd-car.be/Site/SetCulture.aspx?culture=de-DE=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:26 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...