CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

CVE-2022-48257

CVE-2022-48257 affects EternalTerminal

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

CVE-2022-48258: Exposure of Sensitive Information to an Unauthorized Actor

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

Eternal Terminal 安全漏洞

Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1 that stems from its etserver and etclient having predictable log file names in /tmp...

CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48258

CVE-2022-48258 affects EternalTerminal 6.2.1; etserver and etclient create world-readable logfiles, enabling potential exposure of logs containing sensitive data. The CVSS v3.1 base score is 5.3 (Medium) with Confidentiality impact Low. Remediation: update to 6.2.8 (and related package fixes) as ...

Regular Expression Denial Of Service (ReDoS)

terminal-kit is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used in multiple functions of the library, allowing an attacker to crash the application by providing a malicious strings such as '^'.repeatbigNumber...

CVE-2022-3792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

Remote Code Execution

rxvt-unicode is vulnerable to remote code execution. The package is vulnerable to a remote code execution via the Perl background extension when an attacker is able to control the data written to the user's terminal and certain options are set...

PT-2023-13557 · Gullseye · Gullseye

Name of the Vulnerable Software and Affected Versions: GullsEye terminal operating system versions prior to 5.0.13 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2022-3792 SQL Injection in GullsEye Terminal Operating System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

Terminal Operating System SQL注入漏洞

Terminal Operating System is a terminal operating system that accelerates the flow of container, general cargo, liquid cargo, ro-ro and warehouse services at the terminal. A SQL injection vulnerability exists in Terminal Operating System versions prior to 5.0.13. An attacker could exploit this...

CVE-2022-3792

CVE-2022-3792 describes an SQL Injection vulnerability in the GullsEye terminal operating system . According to the connected sources, the issue arises from improper neutralization of special elements used in SQL commands, allowing injection attacks. Affected are versions prior to 5.0.13 . The vu...

CVE-2022-3792: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

PT-2023-1083 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft Exchange Server, which can be exploited by a remote attacker to conduct a spoofing attack. This vulnerability...

terminal-kit Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...