Lucene search
+L

37 matches found

EUVD
EUVD
added 19 hours ago6 views

EUVD-2026-46118

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...

8.5CVSS5.7AI score
Exploits0References3
CVE
CVE
added yesterday7 views

CVE-2026-64624

CVE-2026-64624 affects FreeRDP prior to 3.28.0. The issue arises because lines starting with a forward slash in RDP files are treated as raw command-line options, exposing the CLI parser surface to untrusted files. This enables attackers to craft malicious RDP files leveraging options such as /rd...

8.5CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added yesterday22 views

CVE-2026-64624 FreeRDP RDP File Parser Remote Code Execution via CLI Options

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...

8.5CVSS
Exploits0References2
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-64621

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A double-free vulnerability exists when a FreeRDP client processes a specially crafted .rdp connection file. An attacker could convince a victim to open a malicious .rdp file, leading to a size-controlled...

9.3CVSS6.3AI score
Exploits0References6
EUVD
EUVD
added yesterday7 views

EUVD-2026-45936

FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...

9.3CVSS5.5AI score
Exploits0References3
Cvelist
Cvelist
added yesterday24 views

CVE-2026-64621 FreeRDP before 3.28.0 Double-Free via selectedmonitors

FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...

9.3CVSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-64621

FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...

9.3CVSS5.5AI score
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-14014

Malware in sbrugna...

7.1CVSS5.5AI score0.01148EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2011-0913

Malicious code in bioql PyPI...

6.8CVSS6.5AI score0.04523EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2011-0912

Malicious code in bioql PyPI...

6.8CVSS6.4AI score0.05207EPSS
Exploits1References6
OSV
OSV
added 2017/05/31 2:29 p.m.5 views

CVE-2017-4897

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...

5.5CVSS5.8AI score0.01148EPSS
Exploits0References3
NVD
NVD
added 2017/05/31 2:29 p.m.15 views

CVE-2017-4897

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...

7.1CVSS5.5AI score0.01148EPSS
Exploits0References3
Prion
Prion
added 2017/05/31 2:29 p.m.19 views

Input validation

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...

7.1CVSS5.4AI score0.01148EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2017/05/31 2:0 p.m.67 views

CVE-2017-4897

Affected product: VMware Horizon DaaS prior to 7.0.0. The issue arises from insufficient validation of data, allowing an attacker to mislead DaaS clients into connecting to a malicious server and exposing drives/devices after the victim downloads a specially crafted RDP file via a malicious link....

7.1CVSS5.4AI score0.01148EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/05/31 2:0 p.m.23 views

CVE-2017-4897

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this...

5.5AI score0.01148EPSS
Exploits0References3
Check Point Advisories
Check Point Advisories
added 2017/04/04 12:0 a.m.6 views

Cain And Abel RDP File Stack Buffer Overflow (CVE-2008-5405)

A stack-based buffer overflow exists in Oxid Cain and Abel. The vulnerability is due to insufficient bounds checking on a RDP file. A remote attacker could exploit this vulnerability by enticing a victim to open a specially crafted RDP file. Successful exploitation could allow administrator acces...

9.3CVSS3.9AI score0.46979EPSS
Exploits3
VMware
VMware
added 2017/03/02 12:0 a.m.515 views

Horizon DaaS update addresses an insecure data validation issue

a. Horizon DaaS insecure data validation Horizon DaaS contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitati...

7.1CVSS1AI score0.01148EPSS
Exploits0References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

Cain & Abel 4.9.23 (rdp file) Buffer Overflow PoC

No description provided by source. exploit.py Cain & Abel v4.9.23 rdp file Buffer Overflow PoC other versions may also affected By:Encrypt3d.M!nd encrypt3d.blogspot.com Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder Description: When Using Remote Desktop Password Decoder in Cain and Importing .rdp...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit

No description provided by source. exploit.py print print !R4Q!4N H4CK3R print Cain & Abel 4.9.23 rdp file Buffer overflow Exploit print By:Encrypt3d.M!nd print encrypt3d.blogspot.com print print Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends print This is exploit for my PoC pri...

7.1AI score
Exploits0
Prion
Prion
added 2014/02/18 11:55 a.m.16 views

Design/Logic Flaw

The client in Jetro COCKPIT Secure Browsing JCSB 4.3.1 and 4.3.3 does not validate the FileName element in an RDPFILETRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension...

9.3CVSS7.8AI score0.01413EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder