CVE-2021-35448

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.

• CWE-269

• https://deathflash.ml/blog/remote-mouse-lpeExploit, Third Party Advisory
• https://leobreaker1411.github.io/blog/cve-2021-35448Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50047Exploit, Third Party Advisory, VDB Entry
• https://deathflash.ml/blog/remote-mouse-lpeExploit, Third Party Advisory
• https://leobreaker1411.github.io/blog/cve-2021-35448Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50047Exploit, Third Party Advisory, VDB Entry

Published

Jun 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3542Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3543A flaw null pointer dereference in the Nitro Enclaves kernel…6.7
• CVE-2021-35437SQL injection vulnerability in LMXCMS v.1.4 allows attacker …9.8
• CVE-2021-35438phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets…6.1
• CVE-2021-3544Several memory leaks were found in the virtio vhost-user GPU…6.5
• CVE-2021-35440Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). …6.1
• CVE-2021-35449The Lexmark Universal Print Driver version 2.15.1.0 and belo…7.8
• CVE-2021-3545An information disclosure vulnerability was found in the vir…6.5
• CVE-2021-35450A Server Side Template Injection in the Entando Admin Consol…7.2
• CVE-2021-35451In Teradici PCoIP Management Console-Enterprise 20.07.0, an …6.1
• CVE-2021-35452An Incorrect Access Control vulnerability exists in libde265…6.5
• CVE-2021-35456Online Pet Shop We App 1.0 is vulnerable to remote SQL injec…9.8