142 matches found
aardwolf
🚩 赞助商 如果你喜欢这个项目,可以考虑购买 OctoPwn 的许可证,这是我们完整的、可在浏览器中运行的渗透测试套件! 如需获取新构建/发布通知和其他信息,请加入我们的 Discord AARDWOLF - 基于 Python 的异步 RDP/VNC 客户端(无头模式) 本项目旨在对 RDP 和 VNC 协议进行探索和实验。 该项目不包含 GUI,如需图形客户端请查看 aardwolfgui 🚩 在浏览器中运行 本项目与许多其他渗透测试工具一样,借助 OctoPwn 的力量在浏览器中运行! 查看社区版请访问 OctoPwn - Live 重要提示 这是一个无头客户端,如需 GUI...
Security update for LibVNCServer
This update for LibVNCServer fixes the following issue: CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218. Patch Instructions: To install this SUSE update use the SUSE...
[SECURITY] [DLA 4755-1] libvncserver security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4755-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 25, 2026 https://wiki.debian.org/LTS -...
TencentOS Server 3: gstreamer1-plugins-bad-free (TSSA-2026:0632)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0632 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb
A heap buffer overflow vulnerability was found in GStreamer's librfb RFB/VNC client. The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a...
CVE-2026-52720
A heap buffer overflow vulnerability was found in GStreamer's librfb RFB/VNC client. The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a...
PT-2026-49336
Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A heap buffer overflow exists in the librfb RFB/VNC client component of GStreamer. The issue occurs because the rectangle bounds check validates the total area instead of individual...
OESA-2026-2565 libvncserver security update
libvncserver is a set of programs using the RFB Remote Frame Buffer protocol. They are designed to "export" a frame buffer via net: you set up a server and can connect to it via VNC viewers. If the server supports WebSockets which LibVNCServer does, you can also connect using an in-browser VNC...
CVE-2026-44988
LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but it does not reject Tight rectangles whose width is larger than 2048 pixels. A malicious VNC serve...
EUVD-2019-17657
Malware in sbrugna...
EUVD-2018-7239
Malware in sbrugna...
EUVD-2019-17667
Malware in sbrugna...
EUVD-2018-12600
Malware in sbrugna...
EUVD-2018-12599
Malware in sbrugna...
EUVD-2019-17656
Malware in sbrugna...
[SECURITY] Fedora 40 Update: tigervnc-1.15.0-2.fc40
Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...
CVE-2023-6683: NULL Pointer Dereference
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemuclipboardrequest function can be reached before vncservercuttextcaps was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a maliciou...
SUSE CVE-2018-20021
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM...
SUSE CVE-2018-20024
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS...
Ukraine Continues to Face Cyber Espionage Attacks from Russian Hackers
Cybersecurity researchers on Monday said they uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021. Broadcom-owned Symantec, in a new report published Monday, attributed the attacks to an actor tracked as Gamaredon aka Shuckworm or...