0net

0net: Simple Windows Remote Control Backdoor Introduction: 0net is a simple Windows remote control backdoor program. The client is written in C++ and compiled with VC++6.0. The server is written in Python and is cross-platform. The project is currently under development... Project details:...

CVE-2026-21533_Scanner.py

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services RDS that could allow a local attacker to elevate their privileges to SYSTEM...

CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...

SMBRat

SMBRat A Windows Remote Administration Tool in Visual Basic Script Idea Windows Environments like Active Directory Networks, get really bloated with SMB traffic. All hosts get Policies from the SYSVOL , configurations need remote files to work, desktop shortcuts tend to point to...

CVE-2026-96322

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

CVE-2026-87698

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

CVE-2026-85867

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-83861

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

CVE-2026-70135

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

CVE-2026-70137

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

CVE-2026-69992

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-59116

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-102198

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network...

CVE-2026-102198

An out-of-bounds read vulnerability exists in the Windows Remote Desktop Protocol , which allows an authorized attacker to disclose information over a network. The vulnerability is classified as CWE-125 and carries a medium severity score of 5.3 . While the documents confirm the existence of the ...

CVE-2026-96322

A Use after free vulnerability in the Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While specific affected versions and the exact component/file are not detailed in the provided documents,...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-83861

A heap-based buffer overflow exists in the Windows Remote Desktop Protocol . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation instructions are provided in the documents beyond the mention of an official fix .

CVE-2026-69992

A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...

CVE-2026-59116

Windows Remote Desktop is susceptible to a security feature bypass due to the use of a broken or risky cryptographic algorithm (CWE-327). An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 6.8 (Medium) , wi...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...