7 matches found
EUVD-2022-27930
Malicious code in bioql PyPI...
CVE-2020-8241
A vulnerability in the Pulse Secure Desktop Client 9.1R9 could allow the attacker to perform a MITM Attack if end users are convinced to connect to a malicious server...
CVE-2019-0787
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0788, CVE-2019-1290, CVE-2019-1291...
CVE-2023-39474
Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target...
CVE-2023-41372: Use of Hard-coded Credentials
The vulnerability allows an unprivileged untrusted third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid broadcast intent encrypted with a hardcode...
Microsoft SMBv3 Information Disclosure Vulnerability
Microsoft SMBv3 is a support firmware from Microsoft USA that provides SMB functionality for devices. An information leakage vulnerability exists in the way certain requests are handled in the Microsoft SMBv3 version 3.1.1 protocol. An attacker could exploit this vulnerability by tricking a user...
Xxe
S3 Browser before 8.1.5 contains an XML external entity XXE vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a malicious server via the S3 protocol...