CVE-2019-17662

Cybelsoft ThinVNC 1.0b1 is vulnerable to an arbitrary file read vulnerability due to a directory traversal flaw. An attacker can use the ../../ThinVnc.ini path to access files on the server, specifically targeting the ThinVnc.ini file where authentication passwords are stored in cleartext. This a...

CVE-2022-25226

ThinVNC 1.0b1 contains an authentication bypass via /cmd?cmd=connect that allows an unauthenticated user to gain access and potentially execute code on the server. The NUCLEI template confirms the issue as an authentication bypass leading to unauthorized interaction with the backend, and Red Hat/...