Neat VNC: Authentication Bypass

Background Neat VNC is a liberally licensed VNC server library that's intended to be fast and neat. Description Neat VNC allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is...

GLSA-202411-01 : Neat VNC: Authentication Bypass

The remote host is affected by the vulnerability described in GLSA-202411-01 Neat VNC: Authentication Bypass Neat VNC allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as Type 1 - None, which is accepted even if it is not...

The vulnerability of the server.c file in the server library allows remote access to computers via Neat VNC, enabling a hacker to circumvent existing security restrictions.

The vulnerability of the server.c file in the server library for remote access by Neat VNC is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

[SECURITY] Fedora 39 Update: neatvnc-0.8.1-1.fc39

This is a liberally licensed VNC server library that's intended to be fast and neat. Note: This is a beta release, so the interface is not yet stable...

SUSE CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

DEBIAN-CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

Neat VNC 安全漏洞

Neat VNC is a freely licensed VNC server library from the individual developer Andri Yngvason. A security vulnerability exists in Neat VNC versions prior to 0.81 that stems from the server.c function not properly validating the security type...

CVE-2024-42458

Summary: CVE-2024-42458 affects Neat VNC (neatvnc) servers prior to 0.8.1. The issue, tracked in multiple sources, is that server.c does not properly validate the security type, a related problem to CVE-2006-2369. Impact (as stated): high confidentiality, integrity, and availability impact per CV...

CVE-2024-42458

server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...

PT-2024-5590 · Neat Vnc +1 · Neat Vnc +1

Name of the Vulnerable Software and Affected Versions: Neat VNC versions prior to 0.8.1 Description: The issue is related to a flaw in the authentication procedure of the server.c file in the Neat VNC server library, which allows remote access to computers. This flaw can be exploited by a remote...

Malicious Package

Overview vital-neat-engine is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Friday Squid Blogging: Piglet Squid Video

Really neat. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Lucy Gang Debuts with Unusual Android MaaS Package

There’s a fresh bloom in the malware-as-a-service garden: Researchers have uncovered a new Russian-speaking threat actor hawking a proprietary cyber-weapon dubbed “Black Rose Lucy.” The offering is a malware-as-a-service MaaS bundle with two parts, consisting of a controlling web interface which...

Sql injection

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...