Lucene search
+L

31 matches found

NVD
NVD
•added 2024/12/31 11:15 p.m.•28 views

CVE-2024-56803

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS0.00542EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/12/31 11:15 p.m.•36 views

CVE-2024-56803

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS5.9AI score0.00542EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/31 11:15 p.m.•21 views

UBUNTU-CVE-2024-56803

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS5.8AI score0.00542EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/31 10:48 p.m.•70 views

CVE-2024-56803

Ghostty is a cross‑platform terminal emulator. In version 1.0.0, it improperly handles a specific window-title escape sequence, allowing an attacker to modify the window title and then insert it back into the command line, potentially enabling arbitrary command execution when a user views a file ...

5.1CVSS7.5AI score0.00542EPSS
SaveExploits0References2
Mend
Mend
•added 2024/12/31 10:48 p.m.•6 views

CVE-2024-56803

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

6.3CVSS0.00542EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/12/31 10:48 p.m.•19 views

CVE-2024-56803 Ghostty improperly handles window title sequences which can lead to arbitrary command execution

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS7.5AI score0.00542EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/31 10:48 p.m.•29 views

CVE-2024-56803 Ghostty improperly handles window title sequences which can lead to arbitrary command execution

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS0.00542EPSS
SaveExploits0References2
OSV
OSV
•added 2024/12/31 10:48 p.m.•14 views

CVE-2024-56803 Ghostty improperly handles window title sequences which can lead to arbitrary command execution

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS7.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/31 12:00 a.m.•21 views

PT-2024-37077 · Ghostty · Ghostty

Name of the Vulnerable Software and Affected Versions: Ghostty version 1.0.0 Description: Ghostty is a cross-platform terminal emulator that allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal. This...

5.1CVSS8AI score0.00542EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•17 views

Ghostty 代码注入漏洞

Ghostty is a fast, native, feature-rich terminal emulator from the Ghostty open source. A code injection vulnerability exists in Ghostty version 1.0.0. An attacker can exploit this vulnerability to execute arbitrary commands...

5.1CVSS7.7AI score0.00542EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•7 views

CVE-2024-56803: Improper Control of Generation of Code

Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

5.1CVSS6.3AI score0.00542EPSS
SaveExploits0References1
Rows per page
Query Builder