CVE-2026-4692-trust-me-im-in-rdm

CVE-2026-4692 — content processes can declare themselves in RDM Proof of concept for a missing authorization check on BrowsingContext field synchronization: a compromised content process forges a PContent::CommitBrowsingContextTransaction message setting InRDMPane = true on its own top-level...

CVE-2025-14606

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

EUVD-2025-203263

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

CVE-2025-14606

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

CVE-2025-14606 tiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

CVE-2025-14606 tiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

CVE-2025-14606 tiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

CVE-2025-14606

CVE-2025-14606 affects tiny-rdm (up to version 1.2.5). The vulnerability lies in the Pickle Decoding component, specifically pickle_convert.go’s pickle.loads, enabling deserialization and a potentially remote attack. The CVE notes remote initiation, with high attack complexity and publicly disclo...

CVE-2025-14606: Deserialization of Untrusted Data

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...

PT-2025-51115

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickle convert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree o...

EUVD-2016-5492

Malware in sbrugna...

EUVD-2014-0880

Malware in sbrugna...

Devolutions Remote Desktop Manager security vulnerabilities

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.3.29 and earlier, which stems from a business logic error in the hub data sourc...

invenio-app-rdm (>=10.0.0.dev15, <=11.0.0.dev1), invenio-theme-tugraz (4.11.0) +4 more potentially affected by unknown CVE via invenio-communities (>=3.2.2, <=4.2.1)

invenio-communities PYPI version =3.2.2, =10.0.0.dev15, =1.0.40, =11.0.3, =4.0.2, =4.0.22, =4.0.42 Source cves: unknown CVE Source advisory: OSV:GHSA-HJX6-F647-MVF9...

invenio-app-rdm (>=12.0.0.dev0, <=12.0.0b2.dev0), invenio-dnb-urn (0.2.2) +2 more potentially affected by unknown CVE via invenio-communities (>=5.1.0, <=7.7.3)

invenio-communities PYPI version =5.1.0, =12.0.0.dev0, =4.10.0, =11.0.17, =12.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-HJX6-F647-MVF9...

invenio-app-rdm (>=12.0.0.dev0, <=12.0.0b2.dev0), invenio-dnb-urn (0.2.2) +2 more potentially affected by unknown CVE via invenio-communities (>=5.1.0, <=7.7.3)

invenio-communities PYPI version =5.1.0, =12.0.0.dev0, =4.10.0, =11.0.17, =12.0.3 Source cves: unknown CVE Source advisory: GHSA-HJX6-F647-MVF9...

invenio-app-rdm (>=10.0.0.dev15, <=11.0.0.dev1), invenio-theme-tugraz (4.11.0) +4 more potentially affected by unknown CVE via invenio-communities (>=3.2.2, <=4.2.1)

invenio-communities PYPI version =3.2.2, =10.0.0.dev15, =1.0.40, =11.0.3, =4.0.2, =4.0.22, =4.0.42 Source cves: unknown CVE Source advisory: GHSA-HJX6-F647-MVF9...

Default credentials

Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote...

Security Bulletin: A Remote Attack Vulnerability in Apache Log4j affects Engineering Lifecycle Management and IBM Engineering products

Summary There is a high risk Remote Attack Vulnerability in Apache Log4j CVE-2021-44228 which is used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Workflow Management EWM, IBM Engineering Systems...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Appilcation Server and WebSphere Application Server Liberty affects IBM Engineering ELM products on IBM Jazz technology.

Summary There are multiple vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty that affect IBM Engineering Products based on IBM Jazz technology. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...