Lucene search
+L

13 matches found

RedHat Linux
RedHat Linux
•added 2026/10/05 5:19 a.m.•5 views

FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU

A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units PDUs u...

7.1CVSS6AI score0.00382EPSS
SaveExploits1References11
SUSE CVE
SUSE CVE
•added 2026/09/05 12:23 a.m.•14 views

SUSE CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References3
OSV
OSV
•added 2026/09/03 1:06 p.m.•14 views

DEBIAN-CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/09/03 1:06 p.m.•14 views

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.7AI score0.00382EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2026/09/03 9:02 a.m.•16 views

CVE-2026-85089

A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units PDUs u...

7.1CVSS6.7AI score0.00382EPSS
SaveExploits1References10
EUVD
EUVD
•added 2026/09/03 1:04 a.m.•22 views

EUVD-2026-70299

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2026/09/03 1:04 a.m.•17 views

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2026/09/03 1:04 a.m.•16 views

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1
OSV
OSV
•added 2026/09/03 1:04 a.m.•18 views

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•1 views

CVE-2026-85089: Use of Uninitialized Resource

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2026/09/03 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-85089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•25 views

PT-2026-84903

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.30.0 Description Uninitialized heap memory is transmitted in the reserved padding fields of the Save Session Info PDU. This occurs because three PDU writers in libfreerdp/core/info.c rdp write logon info v2, rd...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits1References19
Kitploit
Kitploit
•added 2019/06/01 9:49 p.m.•318 views

Facebash - Facebook Brute Forcer In Shellscript Using TOR

Facebook Brute Forcer in shellscript using TOR IG: @thelinuxchoice Legal disclaimer: Usage of Facebash for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder