45 matches found
EUVD-2025-29630
Malicious code in bioql PyPI...
Greenshot Installed (Windows)
Binary data greenshotwininstalled.nbin...
Greenshot < 1.3.301 Deserialization of Untrusted Data (CVE-2025-59050)
The Greenshot installation on the remote Windows host is prior to 1.3.301. It is, therefore, affected by a deserialization of untrusted data vulnerability: - Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize...
CVE-2025-59050
Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigge...
CVE-2025-59050 Greenshot — Insecure .NET deserialization via WM_COPYDATA enables local code execution
Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigge...
CVE-2025-59050 Greenshot — Insecure .NET deserialization via WM_COPYDATA enables local code execution
Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigge...
CVE-2025-59050
CVE-2025-59050 — Greenshot : Greenshot
CVE-2025-59050 Greenshot — Insecure .NET deserialization via WM_COPYDATA enables local code execution
Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigge...
PT-2025-38057
Name of the Vulnerable Software and Affected Versions: Greenshot versions 1.3.300 and earlier Description: Greenshot is a Windows screenshot utility. The software deserializes attacker-controlled data received in a WM COPYDATA message using BinaryFormatter.Deserialize without prior validation or...
GreenShot 安全漏洞
GreenShot is a lightweight screenshot software tool for Windows from GreenShot, Inc. A security vulnerability exists in GreenShot 1.3.300 and earlier versions that originates from deserializing attacker-controlled data in the WMCOPYDATA message without validation or authentication, which could...
Greenshot 1.3.274 Deserialization / Command Execution Exploit
There exists a .NET deserialization vulnerability in Greenshot versions 1.3.274 and below. The deserialization allows the execution of commands when a user opens a Greenshot file. The commands execute under the same permissions as the Greenshot service. Typically, it is the logged in user. This...
Greenshot 1.3.274 Deserialization / Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Greenshot .NET Deserialization Fileformat Exploit', 'Description' = %q There exists a .NET deserialization vulnerability in Greenshot version...
CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened...
CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened...
Design/Logic Flaw
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened...
CVE-2023-34634
Greenshot 1.2.10 and below is vulnerable to a .NET deserialization issue that allows arbitrary code execution when opening a .greenshot file. The vulnerability arises from insecure deserialization of .NET content inside Greenshot files, with exploitation described as executing commands under the ...
CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened...
CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened...
PT-2023-24959 · .Net · Greenshot
Name of the Vulnerable Software and Affected Versions: Greenshot versions 1.2.10 and below Description: The issue allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened. Recommendations: For Greenshot versions 1.2.10 and below, as a...