PT-2026-30863

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, Pi-hole FTL supports a CLI password feature webserver.api.cli pw that creates “CLI” API sessions intended to be read-only for configuration changes. While /api/config...

EUVD-2020-25994

Malware in sbrugna...

EUVD-2020-12528

Malware in sbrugna...

EUVD-2015-0932

Malware in sbrugna...

Security Bulletin: Authentication mechanism vulnerability affects IBM Connect:Direct for UNIX (CVE-2020-4747)

Summary IBM Connect:Direct for UNIX can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. Vulnerability Details CVEID: CVE-2020-4747 DESCRIPTION: IBM Connect:Direct for UNIX can allow a local or remote user to obtain an authenticated CLI...

CVE-2020-4747

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516...

Authentication flaw

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516...

PT-2020-18223

Name of the Vulnerable Software and Affected Versions IBM Connect:Direct for UNIX versions 4.2.0 through 6.1.0 Description The issue allows a local or remote user to obtain an authenticated CLI session due to improper authentication methods. Recommendations For versions 4.2.0 through 6.1.0, updat...

CVE-2020-4747: Improper Authentication

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516...

CVE-2020-4747

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516...

CVE-2020-1666

The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactiv...

CVE-2020-1666

CVE-2020-1666 affects Juniper Networks Junos OS Evolved: the console logout-on-disconnect option fails to terminate an active CLI session when the console cable is disconnected. Descriptions across connected documents indicate that a physically proximate attacker could resume a prior interactive ...

CVE-2020-1666: Improper Access Control

The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactiv...

PT-2020-14879

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions 18.4R1-EVO through 20.2R1-EVO Description The system console configuration option 'log-out-on-disconnect' fails to log out an active CLI session when the console cable is disconnected, potentially...

Command injection

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...

JVN#65923092: VxWorks WebCLI vulnerable to denial-of-service (DoS)

The VxWorks WebCLI contains a denial-of-service DoS vulnerability due to an issue in parsing command strings. Impact An attacker that can login to a CLI session may cause the current CLI session to crash. Solution Apply a patch Apply the appropriate patch according to the information provided by...