6374 matches found
CVE-2024-41997
A command injection vulnerability exists in Warp Terminal (macOS) versions prior to v0.2024.07.16.08.02 within the Docker integration functionality. The root cause is an unsanitized warp:// URI scheme handler where the /docker/open_subshell action accepts a shell parameter that is incorporated in...
PT-2024-7385
Name of the Vulnerable Software and Affected Versions: Warp Terminal versions prior to 2024.07.18 v0.2024.07.16.08.02 Description: A command injection vulnerability exists in the Docker integration functionality of Warp Terminal. An attacker can create a specially crafted hyperlink using the...
CVE-2024-41997: Improper Control of Generation of Code
An issue was discovered in version of Warp Terminal prior to 2024.07.18 v0.2024.07.16.08.02. A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the warp://action/docker/opensubshell intent that when clicked ...
Siemens HiMed Cockpit Alternate Path Improper Protection Vulnerability
The HiMed Cockpit is a multimedia terminal for infotainment and other applications, including supporting medical procedures at the bedside of hospital patients. Siemens HiMed Cockpit suffers from an improperly protected alternate path vulnerability that could be exploited by an unauthenticated,...
PT-2024-28231
Name of the Vulnerable Software and Affected Versions VMware NSX affected versions not specified Description A command injection issue exists, allowing a malicious actor with access to the NSX Edge CLI terminal to craft malicious payloads and execute arbitrary commands on the operating system as...
The vulnerability of the vt component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the vt component in the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...
SyroTech SY-GOPON-8OLT-L3 安全漏洞
The SyroTech SY-GOPON-8OLT-L3 is an optical line terminal from SyroTech. A security vulnerability exists in SyroTech SY-GOPON-8OLT-L3 version 1.6.0240629 that stems from the presence of an authenticated command injection vulnerability...
tmux: Null Pointer Dereference
Background tmux is a terminal multiplexer. Description A null pointer dereference issue was discovered in function windowpanesetevent in window.c in which allows attackers to cause denial of service or other unspecified impacts. Impact Manipulating tmux window state could result in a null pointer...
Cisco Catalyst Center Static SSH Host Key (cisco-sa-dnac-ssh-e4uOdASj)
The version of Cisco Catalyst Center formerly Cisco DNA Center installed on the remote host is prior to 2.3.5.6, 2.3.6.x, or 2.3.7.x prior to 2.3.7.5. It is, therefore, affected by a vulnerability in the SSH server that could allow an unauthenticated, remote attacker to impersonate a Cisco Cataly...
CVE-2024-20350
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...
CVE-2024-20350 Cisco Catalyst Center Static SSH Host Key Vulnerability
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...
`atty` is unmaintained
The maintainer of atty has published an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's IsTerminal trait. Alternatives - std::io::IsTerminal - Stable since Rust 1.70.0 and the recommended replacement...
PT-2024-40922 · Atty +1 · Atty +1
Name of the Vulnerable Software and Affected Versions: atty affected versions not specified Description: The maintainer of atty has announced that the crate is no longer under development. Users are recommended to rely on the functionality in the standard library's IsTerminal trait instead...
kernel: vt_ioctl: fix array_index_nospec in vt_setactivate
A vulnerability was found in the Linux kernel's vtioctl subsystem, where the vtsetactivate function can lead to a transient integer underflow due to improper handling of the vsa.console value. The vulnerability arises when an out-of-bounds value is decreased before being sanitized using...
[SECURITY] Fedora 41 Update: jupyterlab-4.2.5-1.fc41
JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...
This Windows PowerShell Phish Has Scary Potential
ManyGitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing...
CLSA-2024-1726655093 kernel: Fix of 8 CVEs
blktrace: fix dereference after null check CVE-2019-19768 - blktrace: Protect q-blktrace with RCU CVE-2019-19768 - blktrace: fix unlocked access to init/start-stop/teardown - blktrace: Fix potential deadlock between delete & sysfs ops - net: fix out-of-bounds access in opsinit CVE-2024-36883 -...
The vulnerability of the _nc_wrap_entry() component in the terminal input/output control library allows a attacker to trigger a service denial.
The vulnerability of the ncwrapentry component in the terminal input/output control library is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CLSA-2024-1726609578 kernel: Fix of 8 CVEs
blktrace: fix dereference after null check CVE-2019-19768 - blktrace: Protect q-blktrace with RCU CVE-2019-19768 - blktrace: fix unlocked access to init/start-stop/teardown - blktrace: Fix potential deadlock between delete & sysfs ops - net: fix out-of-bounds access in opsinit CVE-2024-36883 -...
