cve-2019-0708_bluekeep_rce

Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Scanner PoC by @JaGoTu and @zerosum0x0. In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote Desktop Services Remote Code Execution vulnerability. It shouldn't cause denial-of-service, but there is no...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit This script is written to improve this PoC script https://github.com/zerosum0x0/CVE-2019-0708 rdesktop binary was taking too long to timeout so i want it to timeout quicker Multiple ip scan was not possible now you can scan a given ip list Example Ru...

CVE-2026-112278

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit...

Linux Distros Unpatched Vulnerability : CVE-2026-112279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processbmpcache2 in orders.c that allows malicious RDP servers to crash clients via...

Linux Distros Unpatched Vulnerability : CVE-2026-112278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients...

Linux Distros Unpatched Vulnerability : CVE-2026-112277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processplane in bitmap.c that allows malicious RDP servers to crash clients by sendin...

bluekeepscan

BlueKeepScan Simple wrapper over PoC from @zerosum0x0 for checking CVE-2019-0708 in large network in multithreading. Prepare First of all you shouldn download and install original: git clone https://github.com/zerosum0x0/CVE-2019-0708.git cd...

CVE-2026-112279

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending specially crafted bitmap cache orders to a connecting client. Due to insufficient input validation when handling bitmap cache data, the client application can read memory past...

CVE-2026-112278

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability by sending specially crafted bitmap cache orders specifying large image dimensions alongside an undersized data payload. This causes the client application to read beyond i...

CVE-2026-112277

A flaw was found in rdesktop. A remote malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending malformed compressed bitmap data. By specifying large image dimensions alongside an unexpectedly short compressed payload, the server causes an out-of-bounds read past...

CVE-2026-112279

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processbmpcache2 in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width/height or an underflowing mode nibble an...

CVE-2026-112278

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...

CVE-2026-112277

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processplane in bitmap.c that allows malicious RDP servers to crash clients by sending malformed 32 bpp compressed bitmaps. Attackers can declare a large bitmap geometry with a short compressed body in bitmap update PDUs o...

CVE-2026-112278 rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...

CVE-2026-112279

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processbmpcache2 in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width/height or an underflowing mode nibble an...

CVE-2026-112278

The rdesktop client (versions through 1.9.0 ) is vulnerable to a heap out-of-bounds read in the process_raw_bmpcache() function within orders.c. A malicious RDP server can trigger this by sending a raw bitmap cache order with large width, height, and bpp values but a tiny payload, causing memcpy(...

CVE-2026-112278 rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...

EUVD-2026-104295

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...