Posted by disclosure via Fulldisclosure on Sep 03 0day Rubbish Research Team is publicly disclosing two vulnerabilities in NoMachine Terminal Server 10.0.57.
Vulnerability 1 — Pre-authentication heap memory corruption (out-of-bounds write to double-free) (CVSS 9.8,
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, CWE-787)
NoMachine Terminal Server is a closed-source remote-desktop gateway used by enterprises to deliver virtual desktops and
remote sessions over HTTPS. The nxwebrunner CGI...