6347 matches found
Malicious code in terminal-kleur (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb7974c4fea6be8468d7f37887f3a894f3f1c3b8ba50ee5f6eb49872ce93ddc The package terminal-kleur was found to contain malicious code. Source: ghsa-malware 7aeaeb943d666c429839011345be810a0f587322d34b0b03308f43cd1f9611f5...
MAL-2025-48950 Malicious code in terminal-kleur (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb7974c4fea6be8468d7f37887f3a894f3f1c3b8ba50ee5f6eb49872ce93ddc The package terminal-kleur was found to contain malicious code. Source: ghsa-malware 7aeaeb943d666c429839011345be810a0f587322d34b0b03308f43cd1f9611f5...
FRRouting 安全漏洞
FRRouting is FRRouting open source a network routing software suite running on a Unix-like platform . FRRouting has a denial of service vulnerability caused by NULL pointer dereference via the showvtyextlinklanadjsid function on ospfext.c, which can be exploited by an attacker to cause a denial o...
CVE-2025-61101
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkrmtitfaddr function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...
USN-7832-1: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...
USN-7832-1 linux-oracle-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...
EUVD-2025-35064
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each Unit and Terminal within the video function is assigned a unique...
UBUNTU-CVE-2025-40016
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each Unit and Terminal within the video function is assigned a unique...
JLSEC-2025-142 A flaw was found in FFmpeg's TTY Demuxer
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...
Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control
Cybersecurity researchers have disclosed two critical security flaws impacting Red Lion Sixne t remote terminal unit RTU products that, if successfully exploited, could result in code execution with the highest privileges. The shortcomings, tracked as CVE-2023-40151 andCVE-2023-42770 , are both...
Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control
Cybersecurity researchers have disclosed two critical security flaws impacting Red Lion Sixne t remote terminal unit RTU products that, if successfully exploited, could result in code execution with the highest privileges. The shortcomings, tracked as CVE-2023-40151 andCVE-2023-42770 , are both...
CVE-2023-40151
creationtimestamp| type| source ---|---|--- 2025-10-15 04:50:00+00:00| seen| https://thehackernews.com/2025/10/two-cvss-100-bugs-in-red-lion-rtus.html 2025-10-16 04:34:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3bwka3urn26...
The vulnerability of the BLMon Console on the Schneider Electric Saitel DR RTU control platform allows a intruder to execute arbitrary commands.
The vulnerability of the BLMon Console on the Schneider Electric Saitel DR RTU control platform relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow an intruder to execute arbitrary commands...
The vulnerability of the open_actions.py file of the GPU KiTTY-based terminal emulator allows a hacker to execute arbitrary code.
The vulnerability of the openactions.py file of the GPU KiTTY-based terminal emulator is related to a deficiency in the source verification mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
[SECURITY] Fedora 41 Update: podman-tui-1.9.0-1.fc41
podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...
[SECURITY] Fedora 42 Update: podman-tui-1.9.0-1.fc42
podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...
Command Injection
Overview @wonderwhy-er/desktop-commander is a MCP server for terminal operations and file editing Affected versions of this package are vulnerable to Command Injection via the extractBaseCommand function. An attacker can execute arbitrary operating system commands by supplying crafted input that ...
tty: add the option to have a tty reject a new ldisc
...
Linux Distros Unpatched Vulnerability : CVE-2025-54289
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions a...