37 matches found
ps1.kr Cross Site Scripting vulnerability OBB-2867016
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2021-7439
Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings for Windows versions prior to 5.5.4 Description The issue is related to the improper verification of cryptographic signatures for files with .msi, .ps1, and .bat extensions. This could allow a malicious actor to instal...
PT-2020-20586
Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Windows and Mac versions 5.1 through 5.5 before 5.5 SR1 Description The issue arises from the mishandling of command-line arguments when PowerShell .ps1 file extensions are present, leading to a crash of th...
CVE-2020-9326: Undefined Security Weakness
BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...
Rockwell Automation 160-Preset Speed v4.xx DN1 v2.0 Standard 160-PS1 AC Drive
Binary data 752254.prm...
Rockwell Automation 160-Preset Speed v4.xx DN1 v1.2 Standard 160-PS1 AC Drive
Binary data 752224.prm...
Design/Logic Flaw
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
DEBIAN-CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938: Improper Encoding or Escaping of Output
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
PT-2017-6411
Name of the Vulnerable Software and Affected Versions Git versions prior to 1.9.3 Description The issue allows a malicious repository to cause code execution due to unsanitized branch names in the PS1 variable. Recommendations For versions prior to 1.9.3, update to version 1.9.3 or later to resol...
CVE-1999-1048
CVE-1999-1048 affects Bash versions including 2.0.0 and 1.4.17, where a buffer overflow can be triggered by an extremely large directory name. The vulnerability is exploited via the PS1 prompt (\w) when another user changes into that directory, enabling local privilege escalation. The provided do...
CVE-1999-1048: Undefined Security Weakness
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory...
CVE-1999-1383: Undefined Security Weakness
1 bash before 1.14.7, and 2 tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters back-tick, which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable...