Slackware Linux 15.0 / current rxvt-unicode Vulnerability (SSA:2023-003-02)

The version of rxvt-unicode installed on the remote host is prior to 9.26. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-003-02 advisory. - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can contr...

Mageia: Security Advisory (MGASA-2022-0459)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated rxvt-unicode packages fix security vulnerability

rxvt-unicode 9.25 and 9.26 are vulnerable to remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. CVE-2022-4170...

MGASA-2022-0459 Updated rxvt-unicode packages fix security vulnerability

rxvt-unicode 9.25 and 9.26 are vulnerable to remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. CVE-2022-4170...

CVE-2022-4170

creationtimestamp| type| source ---|---|--- 2022-12-09 20:18:33+00:00| seen| https://t.me/cibsecurity/54225 2023-11-08 13:02:31+00:00| seen| https://t.me/cultofwire/1098...

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

CVE-2022-4170

The CVE-2022-4170 issue affects the rxvt-unicode terminal emulator, specifically the Perl background extension. The vulnerability allows remote code execution when an attacker can control data written to the user’s terminal and certain X resources/options are set. Multiple advisories (Gentoo GLSA...

rxvt-unicode is vulnerable to a remote code execution

Marc Lehmann reports: The biggest issue is resolving CVE-2022-4170, which allows command execution inside urxvt from within the terminal that means anything that can output text in the terminal can start commands in the context of the urxvt process, even remotely...

CVE-2013-4170

creationtimestamp| type| source ---|---|--- 2022-06-30 16:38:38+00:00| seen| https://t.me/cibsecurity/45408...

CVE-2013-4170

CVE-2013-4170 concerns Ember.js where user-supplied content bound to an Ember.View.tagName can be inserted into innerHTML without proper sanitization, enabling XSS in affected apps. Affected component: Ember.View.tagName handling; root cause: lack of sanitization when injecting tagName into strin...

CVE-2021-4170

creationtimestamp| type| source ---|---|--- 2022-01-17 00:22:17+00:00| seen| https://t.me/cibsecurity/35651...

CVE-2021-4170

CVE-2021-4170 affects the Calibre-Web web application, with vulnerability described as Improper Neutralization of Input During Web Page Generation (Cross-site Scripting). The provided documents consistently attribute XSS to insufficient neutralization of user input during page generation, affecti...

Security Bulletin: IBM Security Guardium Insights is affected by a Cross-Site Request Forgery vulnerability (CVE-2020-4170)

Summary IBM Security Guardium Insights has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4170 DESCRIPTION: IBM Guardium Activity Insights is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1028)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Whoopsie regression (USN-4170-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4170-3 advisory. USN-4170-1 fixed a vulnerability in Whoopsie and USN-4170-2 fixed a subsequent regression. That update was incomplete and could still result in Whoops...

Ubuntu: Security Advisory (USN-4170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Whoopsie regression (USN-4170-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4170-2 advisory. USN-4170-1 fixed a vulnerability in Whoopsie. The update caused Whoopsie to crash when sending reports. This update fixes the problem. We apologize fo...

Ubuntu 16.04 LTS / 18.04 LTS : Whoopsie vulnerability (USN-4170-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4170-1 advisory. Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of...

SystemTap 1.3 - MODPROBE_OPTIONS Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SystemTap MODPROBEOPTIONS Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a vulnerability in...

CVE-2018-4170

CVE-2018-4170 affects macOS High Sierra prior to 10.13.4 (Admin Framework). A local attacker could disclose passwords by listing the sysadminctl process and its command-line arguments, which included the password parameter. Apple mitigated this in macOS 10.13.4 Security Update 2018-002 (and relat...