Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2026/02/22 1:28 a.m.4 views

CVE-2026-0777

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS6.4AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 10:16 p.m.2 views

CVE-2026-0777

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 10:11 p.m.22 views

CVE-2026-0777 Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 10:11 p.m.1 views

CVE-2026-0777 Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS7.9AI score0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 10:11 p.m.18 views

CVE-2026-0777

The CVE-2026-0777 entry is linked to a concrete vulnerability in Xmind related to attachment handling. The ZDI advisory describes a remote code execution vulnerability in affected Xmind installations that can be exploited when a user opens a malicious attachment or visits a page delivering a craf...

7.8CVSS6.4AI score0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.4 views

Xmind 安全漏洞

Xmind is a mind mapping software developed by Xmind Corporation. There is a security vulnerability in Xmind, which stems from insufficient user interface warnings when processing attachments. This vulnerability could allow remote attackers to execute arbitrary code within the current user...

7.8CVSS7.5AI score0.00045EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/02/06 12:0 a.m.1 views

(0Day) Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of attachments...

7.8CVSS6AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.3 views

PT-2026-6785

Name of the Vulnerable Software and Affected Versions Xmind affected versions not specified Description The software contains a flaw related to insufficient UI warnings when handling attachments. This could lead to remote code execution. There is no information about the number of potentially...

7.8CVSS5.9AI score0.00045EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/17 7:15 p.m.3 views

CVE-2021-47844

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

6.1CVSS7.7AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2026/01/16 7:9 p.m.12 views

CVE-2021-47844

CVE-2021-47844 affects Xmind 2020, describing a persistent cross-site scripting vulnerability in mind mapping files or custom headers that can embed JavaScript to execute commands when opened, enabling remote code execution via user interaction. The documents consistently identify the affected pr...

6.1CVSS7.3AI score0.00026EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/16 7:9 p.m.20 views

CVE-2021-47844 Xmind 2020 - Persistent Cross-Site Scripting

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

6.1CVSS0.00026EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/16 7:9 p.m.2 views

CVE-2021-47844

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

6.1CVSS6.1AI score0.00026EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.1 views

Xmind security vulnerabilities

Xmind is a mind mapping software developed by Xmind Corporation. The Xmind 2020 version has a security vulnerability. This vulnerability stems from allowing the injection of malicious payloads into mind map files or custom headers, potentially leading to remote code execution...

6.1CVSS6.1AI score0.00026EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.2 views

PT-2026-3298

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

6.1CVSS7.7AI score0.00026EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-2712

Malware in sbrugna...

8.1CVSS8AI score0.0212EPSS
Exploits1References2
CNVD
CNVD
added 2021/05/10 12:0 a.m.2 views

Command Execution Vulnerability in XMind Windows Edition and XMind 2021 Beta

XMind is a mind mapping software that is also open source and cross-platform. A command execution vulnerability exists in XMind Windows Edition and XMind 2021 Beta, which can be exploited by an attacker to gain control of a server...

7.5AI score
Exploits0
Packet Storm
Packet Storm
added 2021/05/06 12:0 a.m.926 views

Xmind 2020 Cross Site Scripting / Code Execution

Exploit Title: Xmind 2020 XSS to RCE Exploit Author: TaurusOmar Twitter:@TaurusOmar HomePage:taurusomar.com Date: May 4th, 2021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://www.xmind.net/ Version: 2020 Tested on: Windows, Linux, MacOs Software Description:...

Exploits0
0day.today
0day.today
added 2021/05/05 12:0 a.m.41 views

Xmind 2020 - XSS to Remote Command Execution Vulnerability

Exploit Title: Xmind 2020 - XSS to RCE Exploit Author: TaurusOmar CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://www.xmind.net/ Version: 2020 Tested on: Windows, Linux, MacOs Software Description: XMind, a full-featured mind mapping and brainstorming tool,...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2021/05/05 12:0 a.m.1167 views

Xmind 2020 - Persistent Cross-Site Scripting

Exploit Title: Xmind 2020 - XSS to RCE Exploit Author: TaurusOmar Date: May 4th, 2021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://www.xmind.net/ Version: 2020 Tested on: Windows, Linux, MacOs Software Description: XMind, a full-featured mind mapping and...

7AI score
Exploits0
CNVD
CNVD
added 2021/01/05 12:0 a.m.3 views

XMind for Windows suffers from dll hijacking vulnerability

XMind is a mind mapping software that is also open source and cross-platform. XMind for Windows suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

7.2AI score
Exploits0
Rows per page
Query Builder