56 matches found
RemoteSessionEnum
Blog: https://0xv1n.github.io/posts/sessionenumeration/ このプロジェクトの目的は、大部分が未ドキュメント化されているWindowsステーション（WinSta）APIを利用して、qwinsta /server: の機能を再現しようと試みることでした。...
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation...
EUVD-2026-55627
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-15060 systemd-machined: unprivileged users can terminate arbitrary processes
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-44467
The CVE describes a vulnerability in Claude Desktop (SSH remote development feature) where, from versions 1.2581.0 up to before 1.4304.0, host key verification was bypassed: the system only checked that a hostname existed in ~/.ssh/known_hosts, not that the presented host key matched the stored k...
CVE-2026-0610
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
CVE-2026-0610
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
CVE-2026-0610
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
CVE-2026-0610
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
CVE-2026-0610
A SQL Injection vulnerability exists in the remote-sessions component of Devolutions Server versions 2025.3.1 through 2025.3.12 . The root cause is the improper neutralization of special elements used in SQL commands, which allows an attacker to exploit the functionality through crafted SQL queri...
CVE-2026-0610
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
EUVD-2026-3221
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
CVE-2026-0610
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
CVE-2026-0610: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12...
Devolutions Server security vulnerabilities
Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. Versions of Devolutions Server prior to 2025.3.12 contained a security vulnerability due to SQL injection vulnerabilities...
PT-2026-3441
Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.3.1 through 2025.3.12 Description A SQL Injection issue exists in the remote-sessions component of Devolutions Server. This allows for potential unauthorized access or modification of data. The issue is located...
EUVD-2017-2260
Malware in sbrugna...
EUVD-2024-22968
Malicious code in bioql PyPI...