4993 matches found
PT-2023-1083 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft Exchange Server, which can be exploited by a remote attacker to conduct a spoofing attack. This vulnerability...
8mb (>=1.0.1 <=1.1.4), @0x4447/broccoli (>=1.0.0 <=1.0.16) +605 more potentially affected by CVE-2021-4306 via terminal-kit (>=0.10.9 <=2.1.0)
terminal-kit NPM version =0.10.9, =1.0.1, =1.0.0, =2.0.0, =1.0.0, =1.18.0, =0.0.1, =0.1.0, =0.0.5, =1.3.0, =1.4.1 and more Source cves: CVE-2021-4306 Source advisory: OSV:GHSA-WXGH-8GMR-3QH3...
GHSA-WXGH-8GMR-3QH3 terminal-kit Inefficient Regular Expression Complexity vulnerability
A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...
terminal-kit Inefficient Regular Expression Complexity vulnerability
A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...
CVE-2021-4306
A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...
CVE-2021-4306
A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...
Design/Logic Flaw
A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...
CVE-2021-4306
The CVE-2021-4306 issue affects cronvel terminal-kit up to 2.1.7, with vulnerability to inefficient regular expression complexity (ReDoS) due to an unknown function. Impact is described as HIGH for availability (per CVSS) with network attack vector and no user interaction required. A fix is avail...
CVE-2021-4306 cronvel terminal-kit redos
A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...
Terminal Kit 安全漏洞
Terminal Kit is a command line tool for Node.js. A security vulnerability exists in Terminal Kit versions prior to 2.1.8, which stems from an unknown feature that operates to cause inefficient regular expression complexity...
PT-2023-12410 · Unknown · Cronvel Terminal-Kit
Name of the Vulnerable Software and Affected Versions: cronvel terminal-kit versions up to 2.1.7 Description: A vulnerability has been found in cronvel terminal-kit, where the manipulation leads to inefficient regular expression complexity. This issue affects an unknown function. Recommendations:...
ANSI Escape Sequence Injection
Description Injection of escape sequences opens up the possibility for concealing / modifying viewed data, and code execution as some esc seqs feed data back to stdin. Proof of Concept poc So far, the places I managed to find a successful injection are: - when running id from the file name - func...
Cypherhound - Terminal Application That Contains 260+ Neo4j Cyphers For BloodHound Data Sets
A Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets. Why? BloodHound is a staple tool for every red teamer. However, there are some negative side effects based on its design. I will cover the biggest pain points I've experienced and what this tool aims to...
CVE-2022-37785
An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins...
CVE-2022-37785
CVE-2022-37785 affects WeCube Platform 3.2.2. The issue is that cleartext passwords are displayed in the configuration for terminal plugins, exposing sensitive credentials in the configuration interface. The connected sources confirm the affected product/version and the exact weakness but do not ...
CVE-2022-37785
An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins...
PT-2023-13552 · Unknown · Wecube Platform
Name of the Vulnerable Software and Affected Versions: WeCube Platform version 3.2.2 Description: An issue was discovered where cleartext passwords are displayed in the configuration for terminal plugins. Recommendations: For WeCube Platform version 3.2.2, consider restricting access to the...
CVE-2022-37785
An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins...
The vulnerability of the containerd execution environment, related to uncontrolled resource consumption, allows a attacker to execute a type of attack called a “Denial-of-Service Attack” (DoS).
The vulnerability of containerd’s execution environment is related to an error on the CRI containerd server during the processing of terminal size change events. Exploiting this vulnerability could allow a remote attacker to execute a DoS attack...
