223 matches found
Arbitrary Command Injection
Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the interpolation of untrusted agent metadata into tmux shell command strings executed through /bin/sh -c. An attacker can execute arbitrary commands on the operator host by supplying crafted metadata...
CVE-2026-26068
emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata Transport, Hostname is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code...
CVE-2026-26068 emp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)
emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata Transport, Hostname is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code...
CVE-2026-26068 emp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)
emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata Transport, Hostname is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code...
CVE-2026-26068
CVE-2026-26068 concerns emp3r0r, a Linux-focused C2. Before 3.21.1, untrusted agent metadata (Transport, Hostname) accepted during check-in and interpolated into tmux shell commands executed via /bin/sh -c, enabling command injection and remote code execution on the operator host. The issue is fi...
CVE-2026-26068 emp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)
emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata Transport, Hostname is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code...
PT-2026-7913
Name of the Vulnerable Software and Affected Versions emp3r0r versions prior to 3.21.1 Description emp3r0r is a command and control C2 tool designed for Linux environments. Versions prior to 3.21.1 accept untrusted agent metadata, specifically Transport and Hostname, during the check-in process...
emp3r0r 操作系统命令注入漏洞
emp3r0r is a Linux framework tool developed by Jimmy Mi. Versions of emp3r0r prior to 3.21.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the acceptance of untrusted proxy metadata during the check-in process, which was then inserted int...
CVE-2026-26068: Improper Neutralization of Special Elements used in a Command
emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata Transport, Hostname is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code...
iTerm2 < 3.4.20 RCE (macOS)
The version of iTerm2 installed on the remote host is prior to 3.4.20. It is, therefore, is affected by multiple vulnerabilities: - iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration. CVE-2023-46300 - iTerm2...
iTerm2 < 3.3.6 RCE (macOS)
The version of iTerm2 installed on the remote host is prior to 3.3.6. It is, therefore, affected by a vulnerability: - A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the...
EUVD-2020-19860
Malware in sbrugna...
EUVD-2011-1499
Malware in sbrugna...
EUVD-2019-18907
Malware in sbrugna...
EUVD-2023-50523
Malicious code in bioql PyPI...
tmux:input-fuzzer: Heap-buffer-overflow in input_c0_dispatch
Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=6685381123964928 Project: tmux Fuzzing Engine: afl Fuzz Target: input-fuzzer Job Type: aflasantmux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50200000175a Crash State:...
CVE-2024-38396
An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the built-in tmux integration feature enabled by default, allows an attacker to inject arbitrary code into the terminal, a different vulnerability than...
CVE-2023-46300
iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...
GLSA-202409-27 : tmux: Null Pointer Dereference
The remote host is affected by the vulnerability described in GLSA-202409-27 tmux: Null Pointer Dereference A null pointer dereference issue was discovered in function windowpanesetevent in window.c in which allows attackers to cause denial of service or other unspecified impacts. Tenable has...