6389 matches found
CVE-2023-22971
Cross Site Scripting XSS vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, and HN7000S v6.9.0.37, allows unauthenticated attackers to misuse frames, include JS/HTML code and steal sensitive information from legitimate...
CVE-2023-22971: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, and HN7000S v6.9.0.37, allows unauthenticated attackers to misuse frames, include JS/HTML code and steal sensitive information from legitimate...
CVE-2023-22971
The connected Zero Science Lab report ZSL-2022-5743 documents a Cross-Site Scripting (XSS) vulnerability in Hughes Network Systems HX200 family routers (HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, HN7000S v6.9.0.37) caused by a Remote File Inclusion cross-frame scripting ...
PT-2023-18805
Name of the Vulnerable Software and Affected Versions Hughes Network Systems Router Terminal versions 6.9.0.37 through 8.3.1.14 Description The issue allows unauthenticated attackers to misuse frames, include JS/HTML code, and steal sensitive information from legitimate users of the application...
Ncurses convert_strings Heap Buffer Overflow DoS
The vulnerability of the convertstrings function in the tinfo/readentry.c component of the input/output library for the Ncurses terminal control module is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and als...
GHSA-MC52-JPM2-CQH6 Deno is vulnerable to race condition via interactive permission prompt spoofing
Impact Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the terminal screen after permission prompt was shown and write a generic message li...
Code injection
Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...
CVE-2023-22499 Interactive permission prompt spoofing in Deno
Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
Code injection
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
Code injection
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
PT-2023-15653
Name of the Vulnerable Software and Affected Versions Eternal Terminal version 6.2.1 Description The issue concerns predictable logfile names in /tmp for etserver and etclient. Recommendations For Eternal Terminal version 6.2.1, consider renaming or restricting access to the logfiles in /tmp to...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
Eternal Terminal 安全漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1, which stems from the existence of globally readable log files for its etserver and etclient...
PT-2023-15654
Name of the Vulnerable Software and Affected Versions Eternal Terminal version 6.2.1 Description The issue concerns world-readable logfiles in etserver and etclient. Recommendations For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent unauthorize...