Code injection

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

KramerAV VIA Go and KramerAV VIA Connect Code Injection Vulnerabilities

KramerAV VIA Connect and KramerAV VIA Go are both products from KramerAV.KramerAV VIA Connect is a smart, secure, wireless and wired presentation and collaboration device.KramerAV VIA Go is a wireless device. Instant wireless connectivity with 4K advanced presentation capabilities for iOS, Androi...

CVE-2023-33469

KramerAV VIA Connect (2) and VIA Go (2) are affected by CVE-2023-33469 when screen is visible and a remote mouse connection is enabled. Versions prior to 4.0.1.1326 allow local code execution at root level due to the default remote-mouse startup behavior. Impact is local, with high privileges ris...

PT-2023-24350 · Kramerav · Kramerav Via Connect +1

Name of the Vulnerable Software and Affected Versions: KramerAV VIA Connect 2 versions prior to 4.0.1.1326 KramerAV VIA Go 2 versions prior to 4.0.1.1326 Description: The issue allows for local code execution at the root level when the screen is visible and remote mouse connection is enabled. Thi...

CVE-2023-33469: Improper Control of Generation of Code

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

PT-2023-20347 · Esri · Arcgis Server

Name of the Vulnerable Software and Affected Versions: ArcGIS Server versions 10.8.1 through 11.1 Description: The issue is related to a Cross-site Scripting vulnerability that may allow a remote, authenticated attacker to create a crafted link. This link could potentially render an image in the...

CWA iOS - Center mouse wheel button clicks not working inside ICA sessions

When Citrix ICA sessions launched from iOS endpoints, the center mouse button clicks are not effective anymore It is only the center button clicks that are not effective inside Citrix sessions. It is still possible to scroll up & down using the center wheel inside a Citrix session...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

Remote code execution

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

RPA Technology Mobile Mouse 安全漏洞

RPA Technology Mobile Mouse is a wireless mouse from RPA Technology. A security vulnerability exists in RPA Technology Mobile Mouse version 3.6.0.4, which originates from the presence of a Remote Code Execution RCE vulnerability...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

CVE-2023-31902

The CVE-2023-31902 entry concerns RPA Technology Mobile Mouse 3.6.0.4 with a Remote Code Execution (RCE) vulnerability. Affected item: Mobile Mouse Server component used by the device; root cause involves a vulnerability exploitable over the network, allowing code execution without user interacti...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

PT-2023-23507 · Pax Technology · Rpa Technology Mobile Mouse

Name of the Vulnerable Software and Affected Versions: RPA Technology Mobile Mouse version 3.6.0.4 Description: The issue concerns Remote Code Execution RCE, allowing for potential code execution on affected devices. Recommendations: For RPA Technology Mobile Mouse version 3.6.0.4, at the moment,...

CVE-2023-31902: Undefined Security Weakness

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

libsdl2: Multiple Vulnerabilities

Background Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio, keyboard, mouse, joystick, and graphics hardware via OpenGL and Direct3D. Description Multiple vulnerabilities have been discovered in libsdl2. Please review the CVE...

Stored XSS on items in Folder

Description first create two user accounts and grant them permission to access a same folder. In one of the accounts, generate a new item within the folder. Paste the payload XSS into this field, then save the item. Once saved, click on the item to activate an XSS alert. To confirm the success of...

WiFi Mouse 1.8.3.2 - Remote Code Execution Exploit

Exploit Title: WiFi Mouse 1.8.3.2 - Remote Code Execution RCE Author: Payal Vendor Homepage: http://necta.us/ Software Link: http://wifimouse.necta.us/download Version: 1.8.3.2 Tested on: Windows 10 Pro Build 21H2 Desktop Server software used by mobile app has PIN option which does not to prevent...