CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

CVE-2021-3560-PolkitPrivilegeEsclation

CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...

RLSA-2026:98510 Important: gnome-remote-desktop security update

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers GNUTLSEAGAIN / GNUTLSEINTERRUPTED CVE-2026-109832 For more details about the security issues, including the impact, a...

RLSA-2026:98453 Important: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service CVE-2026-15709 libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denia...

gnome-remote-desktop security update

An update is available for gnome-remote-desktop. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME Remote Desktop is a remote desktop and screen sharing...

CVE-2010-2387

CVE-2010-2387 Version: https://github.com/GNOME/gdm/tree/2799f52e01354944c0f464aa93bc5adfbc6bc0e8...

Ubuntu-Gnome-privilege-escalation

Ubuntu-Gnome-privilege-escalation A bash script exploit of CVE-2020-16126/CVE-2020-16127 to achieve privilege escalation. 一个可以方便实现Ubuntu本地提权的bash脚本（利用CVE-2020-16126/CVE-2020-16127漏洞），要求处于Gnome环境。 Affect version Ubuntu 20.04.1\20.10\18.04\16.04 LTS and so on Usage curl...

Important: Red Hat Security Advisory: gnome-remote-desktop security update

An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers (GNUTLS_E_AGAIN / GNUTLS_E_INTERRUPTED)

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...

gnome-remote-desktop: gnome-remote-desktop: unauthenticated RDP sockets lack a handshake deadline

A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global...

Medium: gnome-shell

Issue Overview: A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing...

Moderate: Red Hat Security Advisory: gnome-remote-desktop security update

An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gnome-remote-desktop: gnome-remote-desktop: unauthenticated RDP sockets lack a handshake deadline

A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global...

Important: Red Hat Security Advisory: gnome-remote-desktop security update

An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers (GNUTLS_E_AGAIN / GNUTLS_E_INTERRUPTED)

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...

Moderate: Red Hat Security Advisory: gnome-remote-desktop security update

An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gnome-remote-desktop: gnome-remote-desktop: unauthenticated RDP sockets lack a handshake deadline

A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global...

CVE-2020-16125-Reproduction

CVE-2020-16125-Reproduction This repository is aimed at reproducing the attack . Description : Its original name is “Ubuntu gdm3 privilege escalation” , and it is found by a Github security researcher named Kevin Backhouse . Its CVSS score is 4.6/10 medium and the affected environment is Ubuntu...

RHEL 9 : gnome-remote-desktop (RHSA-2026:98510)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98510 advisory. GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop: Busy-Wa...

RHEL 10 : gnome-remote-desktop (RHSA-2026:98622)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98622 advisory. GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop:...