https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:23:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-03915 cnvd-2022-03915 https://cve.radiocsirt.org/vuln/cnvd-2022-03915 https://cve.radiocsirt.org/vuln/euvd-2026-32267 EUVD-2026-32267 https://cve.radiocsirt.org/vuln/euvd-2026-32267 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42956 <p>Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.</p> <p>Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42956 https://cve.radiocsirt.org/vuln/ghsa-c3cj-f35q-73qf <p>Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.</p> <p>Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.</p> https://cve.radiocsirt.org/vuln/ghsa-c3cj-f35q-73qf https://cve.radiocsirt.org/vuln/gsd-2021-42956 gsd-2021-42956 https://cve.radiocsirt.org/vuln/gsd-2021-42956