RDGScanner

CVE-2020-0609 与 CVE-2020-0610 扫描器 一个概念验证扫描器，用于检查 RDP 网关服务器是否存在 CVE-2020-0609 与 CVE-2020-0610 漏洞。 已在以下环境测试： Windows Server 2012 x64 Windows Server 2016 x64 Windows Server 2019 x64 免责声明 扫描内存损坏漏洞存在风险，可能导致系统崩溃。 尽管本工具在设计上尽量避免导致崩溃，但无法 100% 保证稳定性。 请自行承担使用风险，并且仅可扫描你拥有测试权限的系统。 使用方法 python3 RDGScanner.py...

CVE-2026-33952

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker, by operating a malicious RDP Gateway, can exploit an unvalidated authentication length field. This can cause a FreeRDP client connecting through the gateway to crash, leading to a Denial of...

FreeRDP 安全漏洞

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.24.2 contained a security vulnerability. This vulnerability stemmed from the unvalidated network read of the authlength field, which could trigger assertion failures. This could cau...

Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Updated January 15th: Added an Advanced Custom Detection ACD signature for AMP that can be used to detect exploitation of CVE-2020-0601 by spoofing certificates masquerading as a Microsoft ECC Code Signing Certificate Authority. Microsoft released its monthly security update today...

Microsoft Windows RDP Gateway Server Remote Code Execution (CVE-2020-0609)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...