Eskom Computer Water Metering Software SQL注入漏洞

Eskom Computer Water Metering Software is a handheld terminal application. A SQL injection vulnerability exists in Eskom Computer Water Metering Software versions prior to 23.04.06, which arises from an improper neutralization of a particular element used, and SQL injection...

CVE-2023-1326 local privilege escalation in apport-cli

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

CVE-2023-1326 local privilege escalation in apport-cli

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

PT-2023-16898 · Unknown +2 · Apport-Cli +2

Name of the Vulnerable Software and Affected Versions: apport-cli versions 2.26.0 and earlier Description: A privilege escalation attack was found, similar to a known issue, which can be exploited by a local attacker if the system is specially configured. This configuration includes allowing...

Ubuntu: Security Advisory (USN-6005-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6005-1: Sudo vulnerabilities

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly escaped control characters in log messages and sudoreplay output. An attacker could possibly use these issues to inject terminal control characters that alter output when being viewed...

USN-6002-1: Irssi vulnerability

It was discovered that Irssi incorrectly handled certain internal routines. An attacker could possibly use this issue to cause a crash...

Schneider Electric EcoStruxure Operator Terminal Expert HMI Code Execution

The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert HMI terminals and the SCADA Pro-face BLUE software is related to improper project conversion. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Schneider Electric EcoStruxure Operator Terminal Expert HMI Code Execution

The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert and the SCADA Pro-face BLUE software is related to improper bypassing of a limited catalog. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SUSE-SU-2023:1712-1 Security update for flatpak

This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes bsc1209410. - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands bsc1209411...

CVE-2022-46387

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands...

CVE-2022-46387

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands...

CVE-2022-46387: Improper Encoding or Escaping of Output

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands...

CVE-2022-46387

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands...

PT-2023-14924 · Conemu +1 · Conemu +1

Name of the Vulnerable Software and Affected Versions: ConEmu versions prior to 220807 Cmder versions prior to 1.3.21 Description: The issue allows an attacker to change the title of the terminal, including control characters, which can then be executed as commands. This is related to the handlin...

Cmder 安全漏洞

Cmder is a package created by Cmder Open Source purely out of frustration with the lack of available console emulators on Windows. A security vulnerability exists in versions of Cmder prior to 1.3.21, which stems from a report that the title of the terminal includes control characters, and can be...

SGIUtility Component Code Execution

The vulnerability of the SGIUtility component in Schneider Electric’s HMI terminal configuration software, as well as in the SCADA Pro-face BLUE software, is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to execute arbitrary...

CVE-2022-46416

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

Design/Logic Flaw

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2022-46416

CVE-2022-46416 (Parrot Bebop 4.7.1) : The drone is affected by a DHCP pool exhaustion vulnerability that prevents legitimate terminal connections. An attacker must first connect to the device’s internal Wi‑Fi (e.g., via guessing the password) and then send a high volume of DHCP request packets to...