CVE-2023-39107: Improper Link Resolution Before File Access

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks...

CVE-2023-39107

CVE-2023-39107 affects NoMachine Free Edition and Enterprise Client for macOS prior to 8.8.1. The issue is an arbitrary file overwrite vulnerability enabled by hardlinks, allowing an attacker to overwrite root-owned files. The NVD entry assigns CVSSv3.1 base score 9.1 (CRITICAL) with NETWORK atta...

NoMachine Remote Access Code Execution

The vulnerability of the NoMachine remote access system is related to incorrect default access settings for the directory C:\ProgramData\NoMachine\var\uninstall. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

CVE-2022-48074

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

CVE-2022-48074

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

CVE-2022-48074

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

Design/Logic Flaw

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

CVE-2022-48074

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

CVE-2022-48074

NoMachine before version 8.2.3 is affected. A vulnerability allows an attacker to execute arbitrary commands by processing a crafted ".nxs" file. Affected software: NoMachine (prior to 8.2.3); attack vector involves opening or handling a crafted .nxs file. Underlying root cause details are not ex...

CVE-2022-48074: Undefined Security Weakness

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

NoMachine security vulnerabilities

NoMachine is a remote desktop access tool from NoMachine Luxembourg. A security vulnerability exists in NoMachine versions prior to v8.2.3, which can be exploited by an attacker to execute arbitrary commands via a crafted .nxs file...

NoMachine licensing issue vulnerability

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. v7.9.2 of NoMachine is vulnerable to an authorization issue that originates from incorrect permissions in the C:ProgramDataNoMachinevaruninstall folder. An attacker could exploit this vulnerability to hijack the DLL and...

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

Code injection

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

CVE-2022-34043

CVE-2022-34043 pertains to NoMachine v7.9.2, where the folder at C:\ProgramData\NoMachine\var\uninstall has incorrect permissions. This enables DLL hijacking and arbitrary code execution if exploited locally. The cited sources consistently describe the vulnerability as an authorization/permission...

PT-2022-6521 · Nomachine · Nomachine

Name of the Vulnerable Software and Affected Versions: NoMachine version 7.9.2 Description: The issue is related to incorrect permissions for the folder C:ProgramDataNoMachinevaruninstall of NoMachine, which allows attackers to perform a DLL hijacking attack and execute arbitrary code. This is du...

NoMachine security vulnerabilities

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. v7.9.2 of NoMachine is vulnerable to an authorization issue that originates from incorrect permissions in the C:ProgramDataNoMachinevaruninstall folder. An attacker could exploit this vulnerability to hijack the DLL and...