CVE-2023-47297: Improper Access Control

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations...

CVE-2023-47029

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component...

PT-2025-26616 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "UserService SOAP API" function. Recommendations: For NCR Terminal Handler version 1.5.1, consider...

NCR Atleos Terminal Handler 安全漏洞

NCR Atleos Terminal Handler is an ATM enterprise software solution from NCR Atleos that reduces costs, improves business agility and increases your competitive advantage. A security vulnerability exists in NCR Atleos Terminal Handler version 1.5.1 that stems from the SOAP API component mishandlin...

CVE-2023-47029

A security vulnerability exists in NCR Terminal Handler v.1.5.1 (also referred to as NCR Atleos Terminal Handler ) involving the UserService component. A remote attacker can exploit this issue by sending a crafted POST request , which leads to the execution of arbitrary code and unauthorized acce...

NCR Atleos Terminal Handler 安全漏洞

NCR Atleos Terminal Handler is an ATM enterprise software solution from NCR Atleos that reduces costs, improves business agility and increases your competitive advantage. A security vulnerability exists in NCR Atleos Terminal Handler version 1.5.1, which stems from insufficient validation of text...

Security update for screen

This update for screen fixes the following issues: Security issues fixed: CVE-2025-46802: temporary chmod of a user's TTY to mode 0666 when attempting to attach to a multi-user session allows for TTY hijacking bsc1242269. Other issues fixed: Use TTY file descriptor passing after a suspend MSGCONT...

SUSE CVE-2022-49948

In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctlKDFONTOP the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus...

[SECURITY] Fedora 42 Update: rust-git-interactive-rebase-tool-2.4.1-9.fc42

Full-featured terminal-based sequence editor for Git interactive rebase...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from VT's failure to clear selections before changing fonts, which could lead to out-of-bounds access...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from vt not initializing the unicode screen buffer, which could lead to information disclosure...

[SECURITY] [DLA 4220-1] konsole security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4220-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 17, 2025 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 41 Update: rust-git-interactive-rebase-tool-2.4.1-9.fc41

Full-featured terminal-based sequence editor for Git interactive rebase...

Konsole: Code execution

Background Konsole is KDE's terminal emulator. Description Konsole supports loading URLs from the scheme handlers such as telnet://URL. This can be executed regardless of whether the telnet binary is available. It would fallback to bash in that case and execute arbitrary code. Impact Clicking a...

[SECURITY] Fedora 41 Update: aerc-0.20.1-2.fc41

Aerc is an email client that runs in your terminal. It is highly efficient and extensible, perfect for the discerning hacker...

[SECURITY] Fedora 42 Update: aerc-0.20.1-3.fc42

Aerc is an email client that runs in your terminal. It is highly efficient and extensible, perfect for the discerning hacker...

[SECURITY] Fedora 41 Update: gh-2.74.0-1.fc41

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

[SECURITY] Fedora 42 Update: gh-2.74.0-1.fc42

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

KDE Konsole 安全漏洞

KDE Konsole is a customizable terminal emulator from KDE. A security vulnerability exists in KDE Konsole versions prior to 25.04.2 that stems from improper URL handling and could lead to remote code execution...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...