CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32547

The CVE-2023-32547 issue affects MAVinci Desktop Software for Intel® Falcon 8+ prior to version 6.2. The root cause is incorrect default permissions in the MAVinci Desktop software, which could allow an authenticated local user to escalate privileges. CVSS vectors indicate a local attack with low...

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

Intel Falcon 8+ Security Vulnerability

Intel Falcon 8+ is a professional-grade drone from Intel Corporation USA. A security vulnerability exists in Intel Falcon 8+ MAVinci Desktop Software prior to version 6.2, which stems from incorrect default permissions. An attacker can exploit the vulnerability to elevate privileges...

CVE-2023-32547: Incorrect Default Permissions

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25839

There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit this issue is...

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware. AhnLab Security Emergency Response Center ASEC, in a new analysis, said it marks the continued abuse of the flaws to deliver a variety of payloads on...

The vulnerability of the UI Desktop software lies in its lack of access control mechanisms, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the UI Desktop software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerability of the ZRLEDecoder software, which is part of VNC TigerVNC, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the ZRLEDecoder software, developed for VNC and TigerVNC protocols, relates to operations involving resources after their expiration. Exploiting this vulnerability can allow unauthorized individuals to gain access to confidential data, compromise its integrity, and cause...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

Genki Desktop for PC suffers from dll hijacking vulnerability

Genki Desktop for PC is a desktop wallpaper beautification software. Genki Desktop for PC suffers from a dll hijacking vulnerability. Attackers can use the vulnerability to load malicious dll and execute malicious code...

CVE-2020-28249

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...

Memory corruption vulnerability exists in RZoffice (CNVD-2020-41230)

RZoffice is a desktop software compatible with MS Office. RZoffice suffers from a memory corruption vulnerability. An attacker could exploit this vulnerability to conduct a denial of service attack...

The vulnerability of the RRE decoder VNC client component of the remote desktop management software UltraVNC allows a hacker to execute arbitrary code.

The vulnerability of the RRE decoder VNC client component of the remote desktop management software UltraVNC is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Small Tax-Preparation Firms at Higher Risk this Tax Season, Report

This tax season crooks are targeting users with a new crop of scams that include leveraging remote desktop software and compromising small tax-prep company websites. “If you have the word ‘tax’ in your domain name; you’re a target this year,” warns Sherrod DeGrippo, senior director of threat...

TightVNC Buffer Overflow Vulnerability (CNVD-2019-39875)

TightVNC is a cross-platform open source remote desktop software. TightVNC suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause, for example, a buffer overflow or heap overflow...

TightVNC Code Issue Vulnerability

TightVNC is a cross-platform open source remote desktop software. TightVNC suffers from a code issue vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

TeamViewer was Targeted by Chinese Hackers in 2016

By Ryan De Souza TeamViewer has only confirmed now that Chinese state-sponsored hackers targeted the company in 2016. The Germany-based company behind the world-famous remote desktop software TeamViewer has confirmed that in 2016 TeamViewer software was compromised. The confirmation comes right...

Faleemi Desktop Software 1.8 Local Buffer Overflow

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Faleemi Desktop Software 1.8 - Local Buffer Overflow SEHDEP Bypass Date: 01-26-19 Vulnerable Software: Faleemi Desktop Software 1.8 Vendor Homepage: https://www.faleemi.com/ Version: 1.8.0 Software Link 1:...

Faleemi Desktop Software 1.8 - Local Buffer Overflow (SEH) (DEP Bypass) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Faleemi Desktop Software 1.8 - Local Buffer Overflow SEHDEP Bypass Date: 01-26-19 Vulnerable Software: Faleemi Desktop Software 1.8 Vendor Homepage: https://www.faleemi.com/...