Microsoft Remote Desktop Client Remote Code Execution Vulnerability [CVE-2021-38666]
CVE number -= CVE-2021-38666 In the case of a Remote Desktop connection, an attacker with control of a Remote Desktop
Read More
RDP
Microsoft Remote Desktop Services (RDP8) license negotiation denial-of-service vulnerability [CVE-2019-1453]
CVE number – CVE-2019-1453 An exploitable denial-of-service vulnerability exists in the RDP8 implementation of Microsoft’s Remote Desktop Services. A certain
Read More
TFlower Ransomware infects users via exposed unpatched RDP services
Initial infection vector for this malware appears to be through exposed, unpatched Remote Desktop services, but can also include email
Read More
New Vulnerabilities In Microsoft Remote Desktop Services [DejaBlue] [CVE-2019-1181&1182]
Microsoft have just released a set of fixes for it’s Remote Desktop Services that include two critical Remote Code Execution
Read More
Researcher discloses BlueKeep Exploit
A security researcher under the Twitter handle @zerosum0x0 has recently disclosed his Remote Desktop Protocol (RDP) exploit for the BlueKeep vulnerability to
Read More
GoldBrute Botnet Brute Forcing RDP Servers
A posting to the InfoSec Handlers Diary has provided information on a botnet named GoldBrute. It is currently attempting to
Read More
Windows Remote Desktop Services RCE Vulnerability [CVE-2019-0708]
Microsoft has released updates to fix a critical remote code execution (RCE) vulnerability that affects Remote Desktop Services in some
Read More
rdesktop process_bitmap_updates() Function Heap-Based Buffer Overflow Remote Code Execution Vulnerability [CVE-2018-8795]
CVE Number – CVE-2018-8795 A vulnerability in the process_bitmap_updates() function of rdesktop could allow an unauthenticated, remote attacker to execute arbitrary code
Read More
rdesktop process_plane() Function Heap-Based Buffer Overfow Remote Code Execution Vulnerability [CVE-2018-8797]
CVE Number – CVE-2018-8797 A vulnerability in the process_plane() function of rdesktop could allow an unauthenticated, remote attacker to execute arbitrary code
Read More
Cmb RDP Ransomware
First observed in 2018, Cmb is a new variant of the Dharma ransomware family. As with most Dharma variants, Cmb is delivered
Read More