67 matches found
CVE-2024-38077-RDLCheck
CVE-2024-38077-RDLCheck RDLサービスが実行中かどうかを検出し、影響を受ける資産を迅速に特定します 使用方法: impacketのインストール root@kitploit: git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . スクリプトの使用方法: root@kitploit: python3 RDLCheck.py usage: RDLCheck.py -h -ip IP -f F -t T Windows Remote Desktop...
CVE-2024-38077
CVE-2024-38077 こちらは、CVE-2024-38077 の GitHub 上の説明文の一例です: CVE-2024-38077: Windows Remote Desktop Licensing Service におけるリモートコード実行の脆弱性 概要: CVE-2024-38077 は、Windows リモート デスクトップ ライセンス...
cve-2024-38077-madlicense_reproduction
CVE-2024-38077: Windows 远程桌面许可服务远程代码执行漏洞("MadLicense") I. 漏洞概述 CVE ID : CVE-2024-38077 别名 : MadLicense CVSS 评分 : 9.8(严重) 类型 : 堆缓冲区溢出(CWE-122) 发现者 : Ver, Lewis Lee, 彭志宁 描述 : Windows 远程桌面许可(RDL)服务中存在一个无需认证、零点击的远程代码执行漏洞。未认证的攻击者可以向 mstlsap.dll / tlslicense.dll 暴露的 RPC over TCP 端点发送特制的 RPC...
CVE-2024-38077-MadLicense-exploit
CVE-2024-38077 MadLicense - 完全なエクスプロイトフレームワーク 📚 プレゼンテーション用技術ドキュメント このドキュメントでは、フレームワークの各コンポーネント 、存在理由 、および最新Windowsでのヒープバッファオーバーフローエクスプロイトの仕組み を説明します。 🎯 CVE-2024-38077 とは? 脆弱性 Windows Remote Desktop Licensing Service(lserver.exe)は、CDataCoding::DecodeData 関数にヒープバッファオーバーフロー が存在します。 root@kitploit:...
CVE-2026-69627
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...
EUVD-2026-73033
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...
EUVD-2026-73210
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...
Security information for Hitachi Disk Array Systems
Overview CVE-2026-0390 | UEFI Secure Boot Security Feature Bypass Vulnerability CVE-2026-20806 | Windows COM Server Information Disclosure Vulnerability CVE-2026-20928 | Windows Recovery Environment Security Feature Bypass Vulnerability CVE-2026-20930 | Windows Management Services Elevation of...
CVE-2026-26159
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26160
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-22382
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26159 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
...
CVE-2026-26159 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
...
CVE-2026-26160 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
...
CVE-2026-26160 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
...
CVE-2026-26160
CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows Remote Desktop Licensing Service 访问控制错误漏洞
The Microsoft Windows Remote Desktop Licensing Service is a service provided by Microsoft that manages and verifies licenses for remote desktop connections. There is an access control vulnerability in the Microsoft Windows Remote Desktop Licensing Service. Attackers can exploit this vulnerability...