CVE-2026-58056

RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject keyboard and mouse input and reach the unguarded...

PT-2026-53088

Name of the Vulnerable Software and Affected Versions RustDesk affected versions not specified Description An issue exists where incoming control messages are gated based on per-capability flags instead of the session's authorized connection type. Because a file-transfer session fails to clear...

CVE-2026-20640

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and view screenshots of sensitive data from the iPhone during iPhone Mirroring with Mac...

SUSE CVE-2026-21889

Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2...

CVE-2026-21889

Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2...

PT-2026-2916

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15.2 Description Weblate is a web-based localization tool. Prior to version 5.15.2, screenshot images were served directly by the HTTP server without appropriate access controls. This allowed an unauthenticated user...

CVE-2023-40127

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-14997

The Leagoo P1 Android device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains the android framework i.e., systemserver with a package name of android that has been modified by Leagoo or another entity in the supply chain. The systemserv...

CVE-2018-14980

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys contains the android framework i.e., systemserver with a package name of android versionCode=24, versionName=7.0 that has been modified by ASUS or...

EUVD-2015-6568

Malware in sbrugna...

EUVD-2023-44734

Malicious code in bioql PyPI...

CVE-2021-40382

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

CVE-2023-40127

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40127

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-24001

Information disclosure vulnerability in Edge Panel prior to Android S12 allows physical attackers to access screenshot in clipboard via Edge Panel...

CVE-2021-40382

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

CVE-2021-40382

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

Design/Logic Flaw

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

CVE-2021-40382

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

CVE-2021-40382: Undefined Security Weakness

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...