Lucene search
+L

18766 matches found

Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.9 views

PT-2026-3261

Name of the Vulnerable Software and Affected Versions Dive versions prior to 0.13.0 Description Dive is an open-source MCP Host Desktop Application that integrates with function-calling LLMs. A crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user...

9.6CVSS6.8AI score0.06409EPSS
SaveExploits1References12
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.6 views

CVE-2021-47793

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

7.5CVSS5.8AI score0.00469EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/15 11:25 p.m.5 views

CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

7.5CVSS6.5AI score0.00469EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2026/01/15 11:25 p.m.10 views

CVE-2021-47793

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

7.5CVSS6.9AI score0.00469EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/15 11:25 p.m.36 views

CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

7.5CVSS0.00469EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/01/15 11:25 p.m.7 views

CVE-2021-47793

Removed by vendor...

7.5CVSS5.9AI score0.00469EPSS
SaveExploits1
CVE
CVE
added 2026/01/15 11:25 p.m.38 views

CVE-2021-47793

Telegram Desktop 2.9.2 is affected by a Denial of Service vulnerability. An attacker can crash the app by pasting an oversized message payload (a 9,000,000‑byte buffer) into the messaging interface. The vulnerability is cited as CVE-2021-47793. Connected sources indicate PoC availability (e.g., E...

7.5CVSS6.5AI score0.00469EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2026/01/15 3:52 p.m.9 views

EUVD-2026-2766

RDP Manager 4.9.9.3 contains a denial of service vulnerability in connection input fields that allows local attackers to crash the application. Attackers can add oversized entries in Verbindungsname and Server fields to permanently freeze and crash the software, potentially requiring full...

6.8CVSS6AI score0.00232EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.17 views

Cinspiration RDP Manager security vulnerabilities

Cinspiration RDP Manager is a remote desktop management tool developed by the German company Cinspiration. Version 4.9.9.3 of Cinspiration RDP Manager contains a security vulnerability, which stems from the connection input field. This vulnerability could allow local attackers to cause the...

6.8CVSS5.8AI score0.00232EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.10 views

PT-2026-3046

RDP Manager 4.9.9.3 contains a denial of service vulnerability in connection input fields that allows local attackers to crash the application. Attackers can add oversized entries in Verbindungsname and Server fields to permanently freeze and crash the software, potentially requiring full...

6.8CVSS6.5AI score0.00232EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.8 views

PT-2026-3165

Name of the Vulnerable Software and Affected Versions Telegram Desktop version 2.9.2 Description Telegram Desktop version 2.9.2 is subject to a denial of service condition. An attacker can cause the application to crash by sending an oversized message payload. Specifically, a 9 million byte buffe...

7.5CVSS6AI score0.00469EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.14 views

Devolutions Remote Desktop Manager < 2025.3.29.0 Sensitive Information Exposure (DEVO-2026-0002)

The version of Devolutions Remote Desktop Manager installed on the remote host is prior to 2025.3.29.0 and is, therefore, affected by the following Sensitive Information Exposure vulnerability: - Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote...

3.3CVSS5.8AI score0.00182EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.3 views

CVE-2026-21271

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS7.6AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.8 views

CVE-2026-21278

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a...

5.5CVSS6.2AI score0.00197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.8 views

CVE-2026-21274

Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code...

7.8CVSS7.8AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.8 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS7.6AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.7 views

CVE-2026-21275

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.9 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS6.7AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.9 views

CVE-2026-21267

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue requires user interaction in that a victim...

8.6CVSS7.7AI score0.00744EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.10 views

CVE-2026-21276

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.0022EPSS
SaveExploits0References1
Rows per page
Query Builder