CVE-2021-28848

Mintty before 3.4.5 allows remote servers to cause a denial of service Windows GUI hang by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...

CVE-2021-28848

Mintty before 3.4.5 allows remote servers to cause a denial of service Windows GUI hang by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...

Code injection

Mintty before 3.4.5 allows remote servers to cause a denial of service Windows GUI hang by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...

CVE-2021-28847

MobaXterm before 21.0 allows remote servers to cause a denial of service Windows GUI hang via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls...

CVE-2021-28847

MobaXterm before 21.0 allows remote servers to cause a denial of service Windows GUI hang via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls...

CVE-2021-28848

Mintty before 3.4.5 allows remote servers to cause a denial of service Windows GUI hang by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...

CVE-2021-28848

Mintty

CVE-2021-28848

Mintty before 3.4.5 allows remote servers to cause a denial of service Windows GUI hang by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...

CVE-2021-28847

CVE-2021-28847 affects Mobatek MobaXterm prior to 21.0. A remote attacker can cause a denial of service (Windows GUI hang) by sending rapid, repeated tab title change requests, leading to many SetWindowTextA/SetWindowTextW calls. Exploitation is network-based, with low attack complexity and no us...

CVE-2021-28847

MobaXterm before 21.0 allows remote servers to cause a denial of service Windows GUI hang via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls...

PT-2021-17963

Name of the Vulnerable Software and Affected Versions: MobaXterm versions prior to 21.0 Description: The issue allows remote servers to cause a denial of service, resulting in a Windows GUI hang, via tab title change requests sent repeatedly at high speed. This leads to many SetWindowTextA or...

CVE-2021-28847: Undefined Security Weakness

MobaXterm before 21.0 allows remote servers to cause a denial of service Windows GUI hang via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls...

MobaXterm Resource Management Vulnerability

Mobatek MobaXterm is a suite of terminal software from the French company Mobatek that integrates an enhanced terminal, an X server and a Unix command set GNU/Cygwin. MobaXterm prior to 21.0 suffers from a security vulnerability that allows a remote server to cause a denial of service Windows GUI...

CVE-2021-28848: Allocation of Resources Without Limits or Throttling

Mintty before 3.4.5 allows remote servers to cause a denial of service Windows GUI hang by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...

GSD-2021-1000004 Cross Site Scripting (XSS) in VoIPmonitor GUI version 24.55

In VoIPmonitor VoIPmonitor GUI version 24.55 a Cross Site Scripting XSS exists in the VoIPmonitor GUI that can be attacked via SIP resulting in Privilege escalation...

Cross Site Scripting (XSS) in VoIPmonitor GUI version 24.55

In VoIPmonitor VoIPmonitor GUI version 24.55 a Cross Site Scripting XSS exists in the VoIPmonitor GUI that can be attacked via SIP resulting in Privilege escalation...

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

Code injection

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

CVE-2021-29708

CVE-2021-29708 affects IBM Spectrum Scale CNSA 5.1.0.1. A local attacker with access to the GUI pod container could obtain sensitive cryptographic keys, enabling privilege elevation to a privileged core-pod user. The IBM bulletin confirms the vulnerability and provides a fix: upgrade to Spectrum ...