Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be used to send websocket requests and achieve RCE.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cybele Software Thinfinity VNC 访问控制错误漏洞
Vulnerability Description
Cybele Software Thinfinity VNC是美国Cybele Software公司的一种远程桌面软件。允许从所有 Web 浏览器和操作系统远程访问 Windows 计算机。 Thinfinity VNC v4.0.0.1版本存在安全漏洞，该漏洞源于包含一个跨域资源共享 (CORS) 漏洞。远程攻击者可以诱骗用户浏览恶意站点以获取可用于发送 websocket 的ID，并实现远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A