CVE-2025-69720

CVE-2025-69720: ncurses infocmp -i 栈缓冲区溢出 CWE-121 报告人：Yixuan Cao 深圳大学，[email protected] 环境 主机：openEuler 22.03 LTS Linux aarch64 工具链：系统 clang 12.0.1 + AddressSanitizer 源代码：ncurses-6.4 和 ncurses-6.5（在补丁 20251213 之前） 摘要 infocmp -i 调用 analyzestring progs/infocmp.c 来检查 terminfo 条目中的 CSI...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...