PT-2025-42132

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue could allow a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

EUVD-2020-2403

Malware in sbrugna...

EUVD-2020-8810

Malware in sbrugna...

EUVD-2018-1673

Malware in sbrugna...

EUVD-2021-18098

Malware in sbrugna...

EUVD-2021-28363

Malicious code in bioql PyPI...

EUVD-2021-29910

Malicious code in bioql PyPI...

EUVD-2022-29369

Malicious code in bioql PyPI...

CVE-2025-53801

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-56803

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to childprocess.exec without validation, leading to...

GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure

Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure Date: 19-MAR-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Version: 6.1.2.0 or less Tested on:...

CVE-2024-46992 Electron ASAR Integrity bypass by just modifying the content

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 and 31.0.0-alpha.1 to before 31.0.0-beta.1, Electron is vulnerable to an ASAR Integrity bypass. This only impacts apps that have the...

CVE-2023-50159

In ScaleFusion Windows Desktop App agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

CVE-2020-0935

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'...

Microsoft Remote Desktop Client 安全漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft USA. A security vulnerability exists in Microsoft Remote Desktop Client. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected:Windows App Client for Windows...

Unable to save default application on UPM on Windows Desktop OS VDAs after February MS updates

After Microsoft Windows Updates on February 2024, Desktop OS VDAs using Citrix Profile Manager UPM profiles are unable to save default applications As part of the February 2024 updates KB5034763 for Windows 10 and KB5034765 for Windows 11, Microsoft introduced a new driver called the "User Choice...

CVE-2024-49123

Windows Remote Desktop Services Remote Code Execution Vulnerability...

Microsoft Remote Desktop Client 资源管理错误漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected:...

CVE-2024-39613 RCE in desktop app in Windows by local attacker

Mattermost Desktop App versions =5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine...