CVE-2022-48257

CVE-2022-48257 affects EternalTerminal

PT-2023-15653 · Unknown · Eternal Terminal

Name of the Vulnerable Software and Affected Versions: Eternal Terminal version 6.2.1 Description: The issue concerns predictable logfile names in /tmp for etserver and etclient. Recommendations: For Eternal Terminal version 6.2.1, consider renaming or restricting access to the logfiles in /tmp t...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

Eternal Terminal 安全漏洞

Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1 that stems from its etserver and etclient having predictable log file names in /tmp...

CVE-2022-48258

CVE-2022-48258 affects EternalTerminal 6.2.1; etserver and etclient create world-readable logfiles, enabling potential exposure of logs containing sensitive data. The CVSS v3.1 base score is 5.3 (Medium) with Confidentiality impact Low. Remediation: update to 6.2.8 (and related package fixes) as ...

PT-2023-15654 · Unknown · Eternal Terminal

Name of the Vulnerable Software and Affected Versions: Eternal Terminal version 6.2.1 Description: The issue concerns world-readable logfiles in etserver and etclient. Recommendations: For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent...

CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

Eternal Terminal 安全漏洞

Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1, which stems from the existence of globally readable log files for its etserver and etclient...

Windows Terminal RCE (CVE-2022-44702).

A remote code execution vulnerability exists in Windows Terminal. An unauthenticated, local attacker can exploit this to execute arbitrary commands. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 ...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

Regular Expression Denial Of Service (ReDoS)

terminal-kit is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used in multiple functions of the library, allowing an attacker to crash the application by providing a malicious strings such as '^'.repeatbigNumber...

CVE-2022-3792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

Remote Code Execution

rxvt-unicode is vulnerable to remote code execution. The package is vulnerable to a remote code execution via the Perl background extension when an attacker is able to control the data written to the user's terminal and certain options are set...

PT-2023-13557 · Gullseye · Gullseye

Name of the Vulnerable Software and Affected Versions: GullsEye terminal operating system versions prior to 5.0.13 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2022-3792 SQL Injection in GullsEye Terminal Operating System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

CVE-2022-3792

CVE-2022-3792 describes an SQL Injection vulnerability in the GullsEye terminal operating system . According to the connected sources, the issue arises from improper neutralization of special elements used in SQL commands, allowing injection attacks. Affected are versions prior to 5.0.13 . The vu...

Terminal Operating System SQL注入漏洞

Terminal Operating System is a terminal operating system that accelerates the flow of container, general cargo, liquid cargo, ro-ro and warehouse services at the terminal. A SQL injection vulnerability exists in Terminal Operating System versions prior to 5.0.13. An attacker could exploit this...