Code injection

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

CVE-2020-8140 affects Nextcloud Desktop Client for macOS (version 2.6.2). A code injection flaw arises when DYLD_INSERT_LIBRARIES is set in the environment, allowing loading of arbitrary code at startup and enabling code execution in the Nextcloud process. The vulnerability is demonstrated in mul...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment...

Exploit for Use After Free in Microsoft

PoC exploit for CVE-2019-0708, a vulnerability in the Windows Remote Desktop Client. The target product/service is Windows Remote Desktop Client, and the vulnerability class/vector is a Remote Code Execution RCE vulnerability. The probable entry point is the poc.py script, which is invoked by...

Nextcloud: XSS in PDF Viewer

An outdated version of PDF.js in use allows for the CVE-2018-5158 vulnerability. When the payload PDF is shown in the supplied PDF viewer, it can execute arbitrary JavaScript. I have tested the payload PDF, and it is working in the Safari 13.0.5 the latest version and Firefox 74.0 the latest...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the client for remote desktop sessions on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client machines is associated with insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to a remote malicious server...

Command Execution Vulnerability in Ant Notes Desktop Client

Ant Notes Desktop Client is a personal favorite open source note taking software. Ant Notes Desktop Client has a command execution vulnerability that can be exploited by an attacker to gain server privileges...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

Microsoft Windows Remote Desktop Client Remote Code Execution Vulnerability (CNVD-2020-16836)

Microsoft Remote Desktop Client is a remote desktop client. A remote code execution vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit this vulnerability to execute arbitrary code on a computer connected to the client...

Microsoft Windows Remote Desktop Client Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A code execution vulnerability exists in Microsoft Windows Remote Desktop Client, which ca...

CVE-2020-0734

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

CVE-2020-0734

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

CVE-2020-0681

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734...

CVE-2020-0681

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734...

Remote code execution

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

CVE-2020-0734

CVE-2020-0734 affects the Windows Remote Desktop Client. The connected Nessus entries describe a remote code execution vulnerability when a user connects to a malicious RDP server, enabling arbitrary code on the client. The issue is addressed by February 2020 Windows security updates (KB4537820 /...