CVE-2026-61366

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-61366

Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...

CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability

...

CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability

...

EUVD-2026-56328

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

Windows Network Connection Broker Elevation of Privilege Vulnerability

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

EUVD-2020-12400

Malware in sbrugna...

EUVD-2021-28569

Malicious code in bioql PyPI...

EUVD-2021-28568

Malicious code in bioql PyPI...

CVE-2021-38157

LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

CVE-2021-41550

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

Directory traversal

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

Code injection

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

CVE-2021-41550

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

CVE-2021-41550

The CVE-2021-41550 entry affects Leostream Connection Broker 9.0.40.17, where an administrator can upload and execute Perl code. The NVD entry cites a network-accessible vulnerability with low attack complexity and requires a high-privilege context (prerequisites: HIGH; UI: NONE) leading to parti...