CVE-2022-47583

Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal...

CVE-2022-47583

Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal...

CLSA-2022-1650377131 Fix CVE(s): CVE-2022-28391

SECURITY UPDATE: possible remote code execution - debian/patches/CVE-2022-28391.patch: fix possible terminal injection attacks from DNS query results - CVE-2022-28391...

CLSA-2022-1650377094 Fixed CVE-2022-28391 in busybox

CVE-2022-28391: fix possible terminal injection attacks from DNS query results...

Fix of CVE: CVE-2022-28391

CVE-2022-28391: fix possible terminal injection attacks from DNS query results...

CLSA-2022-1650376937 Fix of CVE: CVE-2022-28391

CVE-2022-28391: fix possible terminal injection attacks from DNS query results...

GHSA-C38G-469G-CMGX Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

Since Helm 2 was released, a well-documented aspect of Helm is that the Helm chart's version number MUST follow the SemVer2 specification. In the past, Helm would not permit charts with malformed versions. At some point, a patch was merged that changed this - On a version parse error, the version...

flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)

An incomplete fix for CVE-2017-5226 was found in flatpak. A sandbox bypass flaw was found in the way bubblewrap, which is used for sandboxing flatpak applications handled the TIOCSTI ioctl. A malicious flatpak application could use this flaw to inject commands into the controlled terminal of the...

CVE-2016-2568

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...

linux/x86 - sends "Phuck3d!" to all terminals 60 bytes

linux/x86 sends "Phuck3d!" to all terminals 60 bytes shellcode. Shellcode exploit for linux platform / $Id: where-is-wallie.c, v 1.0 2010/04/24 18:32:29 condis Exp $ linux/x86 sends "Phuck3d!" to all terminals 60 bytes shellcode by condis Tested on: Linux Debian / int mainvoid char evil =...

Hafiye terminal characters injection

It's possible to inject terminal ESC sequences...

Hafiye 1.0 - Remote Terminal Escape Sequence Injection

/ Remote Exploit for Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability Written by Serkan Akpolat Homepage: http://deicide.siyahsapka.org E-mail: deicide siyahsapka org Greets: Virulent, gorny and all other netricians / include include include include include include include typedef stru...