GnuPG 注入漏洞

GnuPG is a suite of open source cryptographic software from the GNU community under the GNU General Public License. The software supports public key, symmetric encryption, hashing, and other algorithms. Versions of GnuPG prior to 2.3.6 suffer from an injection vulnerability that stems from an...

The vulnerability of the implementation of the VPLS operating system Cisco IOS on Cisco Catalyst 6800 series switches allows a intruder to cause service interruptions.

The vulnerability of the VPLS operating system Cisco IOS implemented on Cisco Catalyst 6800 series switches is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause failures in the C6800-16P10G or C6800-16P10G-XL line cards, leading to service...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

gps-sdr-sim 安全漏洞

gps-sdr-sim is a software-defined GPS signal simulator from the individual developers of OSQZSS in Japan. A security vulnerability exists in gps-sdr-sim v1.0, which stems from a buffer overflow when parsing long command line arguments, resulting in a denial of service or code execution...

CVE-2022-31238

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure...

Jwtear - Modular Command-Line Tool To Parse, Create And Manipulate JWT Tokens For Hackers

A modular command-line tool to parse, create and manipulate JSON Web TokenJWT tokens for security testing purposes. Features Complete modularity. All commands are plugins. Easy to add new plugins. Support JWS and JWE tokens. Easy interface for plugins. follow the template example Flexible token...

JVN#41017328: HOME SPOT CUBE2 vulnerable to OS command injection

HOME SPOT CUBE2 provided by KDDI CORPORATION contains an OS command injection vulnerability CWE-78 due to improper processing of data received from DHCP server. Impact An arbitrary OS command may be executed on the product if a malicious DHCP server is placed on the WAN side of the product...

python-urllib3: CRLF injection via HTTP request method

A flaw was found in python-urllib3. The HTTPConnection.request does not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation of the request by injecting additional HTTP headers. The highest threat from this vulnerability is to confidentiality and integrit...

python: CRLF injection via HTTP request method in httplib/http.client

A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat fr...

CVE-2022-2175

A heap buffer over-read vulnerability was found in Vim's putoncmdline function of the src/exgetln.c file. This issue occurs due to invalid memory access when using an expression on the command line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a...

PT-2022-4735 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.03 and below Description: The issue is related to a command injection vulnerability via the byte 4C0160 function. It is associated with insufficient argument validation for certain CLI commands, which can be exploit...

PT-2022-20611 · Unknown +3 · C-Uitl/C-Shquote +4

Name of the Vulnerable Software and Affected Versions: dbus-broker versions prior to 31 Description: An issue was discovered in dbus-broker where it depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is...

CLSA-2022-1655901847 Fix CVE(s): CVE-2022-2042

SECURITY UPDATE: Using uninitialized value and freed memory in spell command - debian/patches/CVE-2022-2042.patch: Initialize "attr" and check for empty line early - CVE-2022-2042...

[SECURITY] Fedora 36 Update: golang-github-cli-gh-0.0.3-1.20220614git9dbbfe2.fc36

A Go module for interacting with gh and the GitHub API from the command line...

[SECURITY] Fedora 36 Update: gh-2.12.1-1.fc36

GitHub=EF=BF=BD=EF=BF=BD=EF=BF=BDs official command line tool...

Cisco Adaptive Security Appliances Software 安全漏洞

Cisco Adaptive Security Appliances Software ASA Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides highly secure access to data and network resources and other features. A security vulnerability exists in the CLI parser of the...

Fedora: Security Advisory for gh (FEDORA-2022-c2ca66a0f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-3089 · Motorola · Motorola Moscad +1

Name of the Vulnerable Software and Affected Versions: Motorola MOSCAD and ACE line of RTUs through 2022-05-02 Description: The issue concerns the omission of an authentication requirement in the Motorola MOSCAD and ACE line of RTUs. These devices feature IP Gateway modules that allow for...