CVE-2019-17662

CVE-2019-17662 الوصف ThinVNC 1.0b1 معرّض لثغرة قراءة ملفات تعسفية، مما يؤدي إلى اختراق خادم VNC. توجد الثغرة حتى عند تفعيل المصادقة أثناء نشر خادم VNC. يتم تخزين كلمة مرور المصادقة كنص واضح في ملف يمكن قراءته عبر متجه هجوم اجتياز الدليل ../../ThinVnc.ini. NIST كيفية تجميع الاستغلال $ git clone...

CVE-2019-17662-Exploit

CVE-2019-17662 Description ThinVNC 1.0b1 est vulnérable à une lecture de fichier arbitraire, ce qui conduit à un compromis du serveur VNC. La vulnérabilité existe même lorsque l'authentification est activée lors du déploiement du serveur VNC. Le mot de passe d'authentification est stocké en clair...

The vulnerability of the VNC server component XRDP allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the VNC server component XRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure remotely...

The vulnerability of the VNC server component XRDP allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the VNC server component XRDP is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

AlmaLinux 9.2 [TuxCare] Security Update: qemu-guest-agent / qemu-img / qemu-kvm / qemu-kvm-audio-pa / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777042213)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777042213 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an...

CVE-2026-79680

A flaw was found in the Qt VNC Server module. A remote attacker, by using a specially modified VNC client that violates the Remote Framebuffer RFB protocol, can bypass the password authentication mechanism. This allows the attacker to gain unauthorized remote access to the shared application,...

CVE-2026-79680

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

EUVD-2026-85846

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680

The Qt VNC Server module contains an authentication bypass vulnerability within its password authentication mechanism. An attacker utilizing a specially modified VNC client that violates the RFB protocol can bypass password requirements to gain unauthorized remote access to the shared application...

CVE-2026-79680: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

PT-2026-97783

Name of the Vulnerable Software and Affected Versions Qt VNC Server affected versions not specified Description An authentication bypass exists in the password authentication mechanism of the Qt VNC Server module. An attacker can use a modified VNC client that violates the RFB Remote Frame Buffer...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2026:4024-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4024-1 advisory. This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting...

Astra Linux – Vulnerability in libvncserver

A divide by zero issue was detected in libvncserver-0.9.12. A malicious client could exploit this flaw to send a specially crafted message. When this message is processed by the VNC server, it will cause a floating-point exception, resulting in a denial of service...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU-built-in VNC server during the processing of ClientCutText messages. A incorrect exit condition may lead to an infinite loop when inflating a zlib buffer controlled by an attacker in the inflatebuffer function. This could allow a remotely authenticated client, wh...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU’s built-in VNC server during the processing of ClientCutText messages. The qemuclipboardrequest function can be accessed before vncservercuttextcaps is called, which gives a malicious authenticated VNC client the opportunity to initialize the clipboard peer. This...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU-built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections exceeds a certain threshold. If it does, QEMU terminates the previous connection. However, if the previous connection is still in the handshake...

Security update for LibVNCServer (important)

openSUSE security update: security update for libvncserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21735-1 Rating: important References: bsc1276218 Cross-References: CVE-2026-50538 CVSS scores: CVE-2026-50538 SUSE : 8.8...

Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218. Patch Instructions: To install this SUSE update use the SUSE...