168 matches found
BlueGate
BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. ollypwn さんが私の愚かな間違いを指摘してくれたことに感謝します。 セットアップ 私は、元のリポジトリが正しくビルドできなかったため、パッチを当てたバージョンの pydtls を使用しています。 root@kitploit: cd pydtls sudo python setup.py install サービス拒否 DoS DoS攻撃のPoCは dos.py...
rdg_scanner_cve-2020-0609
Remote Desktop Gateway のスキャン（パッチ未適用の可能性がある CVE-2020-0609 および CVE-2020-0610） このスキャナには2つの動作モードがあります： UDP 3391 で CVE-2020-0609 に脆弱なシステムをチェック https://github.com/MalwareTech/RDGScanner の脆弱性スキャンコードを使用します。 免責事項 メモリ破壊の脆弱性をスキャンすることは危険であり、システムをクラッシュさせる可能性があります。...
CVE-2026-69338
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69292
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73225
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69338
CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...
CVE-2026-69292
A double free vulnerability in the Remote Desktop Gateway Service (Microsoft) allows an authorized local attacker to elevate privileges . The flaw requires local access with low privileges and high attack complexity , but grants full compromise of confidentiality, integrity, and availability upon...
EUVD-2026-73214
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
PT-2026-87339
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
PT-2026-87379
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69292: Double Free
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69338: Use After Free
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-67297
A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, FreeRDP clients should only connect to trusted Remote...
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
UBUNTU-CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
SUSE CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggers a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABR...
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggers a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABR...