VNC Server (Reflective Injection), Reverse HTTP Stager Proxy

Inject a VNC Dll via a reflective loader staged. Tunnel communication over HTTP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 665 include Msf::Payload::Stager include...

[VNC Password Recovery v2.0] All-in-one VNC Password Decoder Tool

VNC Password Recovery is the FREE software to instantly recover VNC password stored by popular VNC Servers. It automatically detects the encrypted VNC password stored in the file system or registry by various VNC server applications. Then it quickly decrypts it and display the original VNC...

CVE-2011-1773

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password...

Authentication flaw

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password...

CVE-2011-1773

CVE-2011-1773 affects virt-v2v prior to 0.8.4, where the VNC console password is not preserved during guest conversion, allowing local users to bypass VNC authentication by connecting without a password. The issue is mitigated by updating virt-v2v to 0.8.4 or later (as referenced in related advis...

CVE-2011-1773

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password...

[THC-Hydra v7.6] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

RealVNC VNC 多个本地权限提升漏洞

BUGTRAQ ID: 64560 CVECAN ID: CVE-2013-6886 RealVNC VNC Server是一款远程控制服务程序。 VNC 5.0.6在处理用户模式vncserver or vncserver-x11或虚拟模式Xvnc setuid-root帮助程序内VNC服务器的某些参数时存在安全漏洞，成功利用后可导致以root权限执行任意代码。 0 RealVNC RealVNC 5.0.6 厂商补丁： RealVNC ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.realvnc.com/...

CVE-2013-6886

RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the 1 vncserver, 2 vncserver-x11, or 3 Xvnc helper...

Design/Logic Flaw

RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the 1 vncserver, 2 vncserver-x11, or 3 Xvnc helper...

CVE-2013-6886

RealVNC VNC 5.0.6 on macOS, Linux, and UNIX is affected by local privilege-escalation vulnerabilities triggered through specially crafted arguments to the vncserver, vncserver-x11, or Xvnc helpers (root-owned setuid-root binaries). The issue arises from handling certain parameters in the server l...

CVE-2013-6886

RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the 1 vncserver, 2 vncserver-x11, or 3 Xvnc helper...

CVE-2013-6886

Removed by vendor...

[THC-Hydra 7.5] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

GNOME Vino VNC Server Denial of Service (CVE-2013-5745)

A denial of service vulnerability exists in GNOME Vino VNC Server. The vulnerability is caused by an infinite loop error in the rfbProcessClientMessage function in rfbserver.c.The vulnerability is due to improper handling of input which results in a loop with an unreachable exit condition.A remot...

CentOS Update for vino CESA-2013:1452 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for vino FEDORA-2013-17121

Check for the Version of vino OpenVAS Vulnerability Test Fedora Update for vino FEDORA-2013-17121 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 19 Update: vino-3.8.1-3.fc19

Vino is a VNC server for GNOME. It allows remote users to connect to a running GNOME session using VNC...

CVE-2013-5135

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username...

CVE-2013-5136

Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, which allows remote attackers to obtain sensitive information in opportunistic circumstances by sniffing the network...