Lucene search
+L

1446 matches found

Prion
Prion
•added 2020/03/20 9:15 p.m.•38 views

Code injection

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

4.6CVSS6.6AI score0.00689EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2020/03/20 9:15 p.m.•24 views

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

6.7CVSS6.8AI score0.00689EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/03/20 8:20 p.m.•54 views

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

6.7AI score0.00689EPSS
SaveExploits1References2
CVE
CVE
•added 2020/03/20 8:20 p.m.•159 views

CVE-2020-8140

CVE-2020-8140 affects Nextcloud Desktop Client for macOS (version 2.6.2). A code injection flaw arises when DYLD_INSERT_LIBRARIES is set in the environment, allowing loading of arbitrary code at startup and enabling code execution in the Nextcloud process. The vulnerability is demonstrated in mul...

6.7CVSS6.6AI score0.00689EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2020/03/20 8:20 p.m.•54 views

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

6.7CVSS6.7AI score0.00689EPSS
SaveExploits1
Gitee
Gitee
•added 2020/03/20 7:24 p.m.•12 views

Exploit for Use After Free in Microsoft

PoC exploit for CVE-2019-0708, a vulnerability in the Windows Remote Desktop Client. The target product/service is Windows Remote Desktop Client, and the vulnerability class/vector is a Remote Code Execution RCE vulnerability. The probable entry point is the poc.py script, which is invoked by...

10CVSS7.6AI score0.99999EPSS
SaveExploits126
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/20 12:00 a.m.•3 views

CVE-2020-8140: Improper Control of Generation of Code

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

6.7CVSS7AI score0.00689EPSS
SaveExploits1References3
Hacker One
Hacker One
•added 2020/03/16 2:01 a.m.•871 views

Nextcloud: XSS in PDF Viewer

An outdated version of PDF.js in use allows for the CVE-2018-5158 vulnerability. When the payload PDF is shown in the supplied PDF viewer, it can execute arbitrary JavaScript. I have tested the payload PDF, and it is working in the Safari 13.0.5 the latest version and Firefox 74.0 the latest...

6.8CVSS1.7AI score0.10445EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/03/10 12:00 a.m.•11 views

The vulnerability of the client for remote desktop sessions on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client machines is associated with insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to a remote malicious server...

7.6CVSS8.1AI score0.16529EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/10 12:00 a.m.•11 views

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS7.6AI score
SaveExploits0References3
CNVD
CNVD
•added 2020/03/03 12:00 a.m.•4 views

Command Execution Vulnerability in Ant Notes Desktop Client

Ant Notes Desktop Client is a personal favorite open source note taking software. Ant Notes Desktop Client has a command execution vulnerability that can be exploited by an attacker to gain server privileges...

7.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/02/27 12:00 a.m.•13 views

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS8AI score0.10626EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•17 views

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

7.8CVSS6.9AI score0.05238EPSS
SaveExploits1References7Affected Software5
CNVD
CNVD
•added 2020/02/14 12:00 a.m.•11 views

Microsoft Windows Remote Desktop Client Remote Code Execution Vulnerability (CNVD-2020-16836)

Microsoft Remote Desktop Client is a remote desktop client. A remote code execution vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit this vulnerability to execute arbitrary code on a computer connected to the client...

7.6CVSS8.5AI score0.10626EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/13 12:00 a.m.•13 views

Microsoft Windows Remote Desktop Client Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A code execution vulnerability exists in Microsoft Windows Remote Desktop Client, which ca...

8.1AI score
SaveExploits0References1
OSV
OSV
•added 2020/02/11 10:15 p.m.•6 views

CVE-2020-0734

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

8.8CVSS7.9AI score0.16529EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/11 10:15 p.m.•24 views

CVE-2020-0734

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

9.3CVSS8.3AI score0.16529EPSS
SaveExploits0References1
OSV
OSV
•added 2020/02/11 10:15 p.m.•6 views

CVE-2020-0681

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734...

7.5CVSS7.9AI score0.10626EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/11 10:15 p.m.•34 views

CVE-2020-0681

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734...

7.6CVSS8.3AI score0.10626EPSS
SaveExploits0References1
Prion
Prion
•added 2020/02/11 10:15 p.m.•33 views

Remote code execution

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

9.3CVSS8.3AI score0.16529EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder