This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-8993 | BDVDB-2026-337221 Detail

Ditec a.s.D.Launcher 2

Description#

D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker infrastructure and to conduct SSRF (Server Side Request Forgery) attacks. User interaction is required as potential victim needs to open a specially crafted URL.

Impact#

CAPEC-272 Protocol Manipulation

Weaknesses#

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-1395 Dependency on Vulnerable Third-Party Component

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.