Lucene search
+L

1974 matches found

Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.8 views

PT-2026-22015

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A buffer overread exists in the freerdp image copy from icon data function libfreerdp/codec/color.c. This issue can be triggered by...

9.8CVSS5.5AI score0.00787EPSS
SaveExploits16References143
RedhatCVE
RedhatCVE
added 2025/12/19 9:14 p.m.18 views

CVE-2025-62003

BullWall Server Intrusion Protection has a noticeable delay before the MFA check when connecting via RDP. A remote authenticated attacker with administrative privileges can potentially bypass detection during this window. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 were confirmed to be...

7.5CVSS6.8AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 9:15 p.m.12 views

CVE-2025-62003

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also ...

7.7CVSS0.00344EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/18 8:35 p.m.27 views

CVE-2025-62003

CVE-2025-62003 affects BullWall Server Intrusion Protection; a configuration-dependent delay before MFA check for RDP could allow a remote, authenticated attacker with administrative privileges to bypass detection during the delay. Affected versions: 4.6.0.0, 4.6.0.6, 4.6.0.7, 4.6.1.4 (other vers...

7.7CVSS6.3AI score0.00344EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 8:35 p.m.7 views

CVE-2025-62003 BullWall Server Intrusion Protection RDP MFA connection delay

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also ...

7.7CVSS6.3AI score0.00344EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/18 8:35 p.m.7 views

CVE-2025-62003

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also ...

7.7CVSS5.5AI score0.00344EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.18 views

PT-2025-52341

Name of the Vulnerable Software and Affected Versions BullWall Server Intrusion Protection versions 4.6.0.0 through 4.6.1.4 Description BullWall Server Intrusion Protection exhibits a delay before Multi-Factor Authentication MFA is checked when connecting via Remote Desktop Protocol RDP. A remote...

7.5CVSS6.5AI score0.00344EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.7 views

TencentOS Server 3: freerdp (TSSA-2022:0002)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0002 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.8CVSS6.9AI score0.0167EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2025/10/27 8:55 a.m.41 views

Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack

The ransomware group known as Qilin aka Agenda, Gold Feather, and Water Galura has claimed more than 40 victims every month since the start of 2025, barring January, with the number of postings on its data leak site touching a high of 100 cases in June. The development comes as the...

7.3AI score
SaveExploits0
NVD
NVD
added 2025/10/14 5:15 p.m.9 views

CVE-2025-55340

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...

7CVSS0.00289EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/14 5:15 p.m.5 views

CVE-2025-55340

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...

7CVSS5.8AI score0.00289EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 5:01 p.m.40 views

CVE-2025-58737

CVE-2025-58737 is a Windows Remote Desktop Protocol (RDP) Remote Code Execution vulnerability described as a use-after-free in the Remote Desktop implementation that allows a local attacker to execute code. The CVE entry shows a base score of 7.0 (HIGH) with LOCAL access, HIGH confidentiality/int...

7CVSS7.2AI score0.00328EPSS
SaveExploits0References1Affected Software6
Vulnrichment
Vulnrichment
added 2025/10/14 5:01 p.m.4 views

CVE-2025-58737 Remote Desktop Protocol Remote Code Execution Vulnerability

...

7CVSS6.6AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/14 5:01 p.m.19 views

CVE-2025-58737 Remote Desktop Protocol Remote Code Execution Vulnerability

...

7CVSS0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/14 5:00 p.m.18 views

CVE-2025-55340 Windows Remote Desktop Protocol Security Feature Bypass

...

7CVSS0.00289EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 5:00 p.m.63 views

CVE-2025-55340

CVE-2025-55340 is a Windows Remote Desktop Protocol security feature bypass caused by improper authentication that can enable an authenticated local attacker to bypass a security feature. The vulnerability affects Windows Remote Desktop Protocol and is rated HIGH with a CVSSv3.1 vector of AV:L/AC...

7CVSS6.7AI score0.00289EPSS
SaveExploits0References1Affected Software9
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:00 p.m.13 views

Windows Remote Desktop Protocol Security Feature Bypass

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...

7CVSS7.1AI score0.00289EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.14 views

PT-2025-41962

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.2 and below, 7.4.7 and below, 7.2.10 and below, 7.0 all versions, 6.4 all versions FortiPAM versions 1.5.0, 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions FortiProxy versions 7.6.2...

9CVSS7.3AI score0.0063EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2007-2586

Malware in sbrugna...

7.5CVSS6.4AI score0.09449EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-10046

Malware in sbrugna...

7.5CVSS7.8AI score0.07736EPSS
SaveExploits0References2
Rows per page
Query Builder