Design/Logic Flaw

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-15525

CVE-2019-15525 affects the pw3270 terminal emulator prior to version 5.1, where SSL certificate validation is missing. The consequence is that a network attacker could potentially impersonate a trusted server, enabling improper handling of TLS connections. The provided documents confirm the issue...

Sampler - A Tool For Shell Commands Execution, Visualization And Alerting (Configured With A Simple YAML File)

Sampler is a tool for shell commands execution, visualization and alerting. Configured with a simple YAML file. Installation macOS brew cask install sampler or curl -Lo /usr/local/bin/sampler https://github.com/sqshq/sampler/releases/download/v1.0.1/sampler-1.0.1-darwin-amd64 chmod +x...

HackerTarget ToolKit v2.0 - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery

Use open source tools and network intelligence to help organizations with attack surface discovery and identification of security vulnerabilities. Identification of an organizations vulnerabilities is an impossible task without tactical intelligence on the network footprint. By combining open...

CVE-2016-10812

In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs SEC-117...

CVE-2016-10811

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

lldptool: improper sanitization of shell-escape codes

lldptool can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal...

Everything you need to know about ATM attacks and fraud: part 2

This is the second and final installment of our two-part series on automated teller machine ATM attacks and fraud. In part 1, we identified the reasons why ATMs are vulnerable—from inherent weaknesses of its frame to its software—and delved deep into two of the four kinds of attacks against them:...

CVE-2019-14402

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

CVE-2019-14402

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

Design/Logic Flaw

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

FreeBSD pts resource management error vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. pts is a pseudo-terminal driver used in it. A security vulnerability exists in FreeBSD pts. An attacker can exploit this vulnerability to cause a denial of service and possibly run code...

Arbitrary Password Reset Vulnerability in Shengteng Cloud Terminal Management System

Ltd. is a core subsidiary of a listed company, StarNet Ruijie Communications Co. An arbitrary password reset vulnerability exists in the Shengteng Cloud Terminal Management System, which can be exploited by attackers to reset arbitrary passwords...

CVE-2019-0887

CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...

Passpie - Multiplatform Command-Line Password Manager

Passpie is a command line tool to manage passwords from the terminal with a colorful and configurable interface. Use a master passphrase to decrypt login credentials, copy passwords to clipboard, syncronize with a git repository, check the state of your passwords, and more. Password files are...

Unauthorized Access Vulnerability in Qinghan Technology QH-S302 Terminal Display Device

Qinghan Technology QH-S302 terminal display device is the terminal part of the information release system. An unauthorized access vulnerability exists in the QH-S302 terminal display device, which can be exploited by an attacker to obtain sensitive information...

WPZD-163(II) Distribution Grid Integration Measurement and Control Terminal has Logic Flaw Vulnerability

Xuji Group Co., Ltd. is a high-tech modern industrial group specializing in electric power, automation and intelligent manufacturing. WPZD-163II Power Distribution Grid Integration Measurement and Control Terminal suffers from a logic flaw vulnerability that can be exploited by attackers to...

Bug in Anesthesia Respirators Allows Cyber-Tampering

A vulnerability in GE Healthcare’s Aestiva and Aespire anesthesia devices would allow an unauthenticated cybercriminal on the same network as the device to modify gas composition parameters within the devices’ respirator function, thus changing sensor readings for gas density. According to GE...