90 matches found
CVE-2026-121396
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...
CVE-2026-121396
FreeRDP clients version 3.0.0 before 3.32.2 built with verbose WinPR assertions are vulnerable to a denial of service (DoS). The root cause is a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. An attacker controlling an RD Gateway can send a crafted RPC-over-HTTP...
EUVD-2026-115928
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...
CVE-2026-121396 FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...
CVE-2026-121396: FreeRDP: FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in…
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...
RTS VLink OpenSSL -engine UNC injection SYSTEM RCE
Authenticated POST /api/v1/ssl/generatetlsclientcertificate with PASSWORD argument injection; WebDAV on LHOST:LPORT serves PoC DLL evil64.dll.b64. """RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE""" from future import annotations from kittysploit import from...
RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE — Detect
Fingerprint / reachability check for RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE""" from kittysploit import from...
CVE-2026-91959 FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...
EUVD-2026-39106
The Zephyr PL011 UART driver drivers/serial/uartpl011.c contains an unbounded software loop in pl011irqtxenable that repeatedly invokes the interrupt-driven application callback while the TX interrupt mask bit PL011IMSCTXIM is set, to work around the controller's level-transition TX-interrupt...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021577)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021577 advisory. In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew...
FreeRDP RDP DoS
The vulnerability of the rtsreadauthverifiernochecks function in the FreeRDP client is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggers a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABR...
CVE-2026-22997
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...
CVE-2026-22997 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2023-52887)
net: can: j1939: vulnerability related to error handling for closely received RTS messages in xtprxrtssessionnew, which is addressed by replacing less informative backtraces with a new method that provides clearer error messages and allows for early termination of problematic sessions. This plugi...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988966)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988966 advisory. In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew...
Malicious Package
Overview redux-toolkit-rts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2004-1516
Malware in sbrugna...