https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:36:07 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-41477 <p>Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.26.0.134, and earlier, Deskflow daemon runs as SYSTEM and exposes an IPC named pipe with WorldAccessOption enabled. The daemon processes privileged commands without authentication, allowing any local unprivileged user to execute arbitrary commands as SYSTEM. Affects both stable v1.20.0 + and Continuous v1.26.0.134 prerelease.</p> <p>Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.26.0.134, and earlier, Deskflow daemon runs as SYSTEM and exposes an IPC named pipe with WorldAccessOption enabled. The daemon processes privileged commands without authentication, allowing any local unprivileged user to execute arbitrary commands as SYSTEM. Affects both stable v1.20.0 + and Continuous v1.26.0.134 prerelease.</p> https://db.gcve.eu/vuln/fkie_cve-2026-41477 https://db.gcve.eu/vuln/gcve-1988-2026-0390 <p><strong>Affected:</strong> unknown Input Leap</p> <p>---------------------------------------------------------------------------- NotCVE Advisory — NotCVE-2026-0015 ----------------------------------------------------------------------------</p> <p>[-] Summary: Missing authentication for a critical function in the input-leapd daemon of Input Leap, the open-source keyboard and mouse sharing tool, allows a local, low-privileged user on Windows to execute arbitrary commands as NT AUTHORITY\SYSTEM by sending a single IPC command message to the daemon&#39;s unauthenticated listener on 127.0.0.1:24801. The command persists and runs again after a service restart or reboot. CVSS:3.1 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).</p> <p>[-] Affected: Input Leap on Windows from v2.4.0 through 3.0.3 (the final release), where input-leapd is registered as a service. The input-leap/input-leap repository was archived read-only on 26 July 2026; no fixed version exists or is expected.</p> <p>[-] Technical Description: IpcServer::listen() binds a TCPListenSocket to 127.0.0.1:24801 (IPC_HOST and IPC_PORT in src/lib/ipc/Ipc.h). IpcServer::handle_client_connecting() accepts the socket and wraps it in an IpcClientProxy with no check of the peer&#39;s identity, session or integrity level; the only thing that tells clients apart is the type each one declares for itself in the kIpcMsgHello handshake.</p> <p>IpcClientProxy::parseCommand() reads a length-prefixed command string and a trailing one-byte elevate flag from the stream, and DaemonApp::handle_ipc_message() passes both to the wa…</p> <p><strong>Affected:</strong> unknown Input Leap</p> <p>---------------------------------------------------------------------------- NotCVE Advisory — NotCVE-2026-0015 ----------------------------------------------------------------------------</p> <p>[-] Summary: Missing authentication for a critical function in the input-leapd daemon of Input Leap, the open-source keyboard and mouse sharing tool, allows a local, low-privileged user on Windows to execute arbitrary commands as NT AUTHORITY\SYSTEM by sending a single IPC command message to the daemon&#39;s unauthenticated listener on 127.0.0.1:24801. The command persists and runs again after a service restart or reboot. CVSS:3.1 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).</p> <p>[-] Affected: Input Leap on Windows from v2.4.0 through 3.0.3 (the final release), where input-leapd is registered as a service. The input-leap/input-leap repository was archived read-only on 26 July 2026; no fixed version exists or is expected.</p> <p>[-] Technical Description: IpcServer::listen() binds a TCPListenSocket to 127.0.0.1:24801 (IPC_HOST and IPC_PORT in src/lib/ipc/Ipc.h). IpcServer::handle_client_connecting() accepts the socket and wraps it in an IpcClientProxy with no check of the peer&#39;s identity, session or integrity level; the only thing that tells clients apart is the type each one declares for itself in the kIpcMsgHello handshake.</p> <p>IpcClientProxy::parseCommand() reads a length-prefixed command string and a trailing one-byte elevate flag from the stream, and DaemonApp::handle_ipc_message() passes both to the wa…</p> https://db.gcve.eu/vuln/gcve-1988-2026-0390