flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)

An incomplete fix for CVE-2017-5226 was found in flatpak. A sandbox bypass flaw was found in the way bubblewrap, which is used for sandboxing flatpak applications handled the TIOCSTI ioctl. A malicious flatpak application could use this flaw to inject commands into the controlled terminal of the...

CVE-2016-2568

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...

linux/x86 - sends "Phuck3d!" to all terminals 60 bytes

linux/x86 sends "Phuck3d!" to all terminals 60 bytes shellcode. Shellcode exploit for linux platform / $Id: where-is-wallie.c, v 1.0 2010/04/24 18:32:29 condis Exp $ linux/x86 sends "Phuck3d!" to all terminals 60 bytes shellcode by condis Tested on: Linux Debian / int mainvoid char evil =...

Hafiye terminal characters injection

It's possible to inject terminal ESC sequences...

Hafiye 1.0 - Remote Terminal Escape Sequence Injection

/ Remote Exploit for Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability Written by Serkan Akpolat Homepage: http://deicide.siyahsapka.org E-mail: deicide siyahsapka org Greets: Virulent, gorny and all other netricians / include include include include include include include typedef stru...