6434 matches found
CVE-2022-24950: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...
CVE-2022-24951
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...
Black Hat and DEF CON Roundup
There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. The week even included a rare Las Vegas fla...
xterm: Multiple Vulnerabilities
Background xterm is a terminal emulator for the X Window system. Description Multiple vulnerabilities have been discovered in xterm. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...
Siemens SICAM A8000 Web Server Module Authentication Bypass Vulnerability
The SICAM A8000 RTU Remote Terminal Unit series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation...
Emerson ControlWave data falsification vulnerability
Emerson ControlWave is a highly programmable controller from Emerson Electric U.S. that combines the unique capabilities of a Programmable Logic Controller PLC and a Remote Terminal Unit RTU into a hybrid controller. A data forgery vulnerability exists in all versions of Emerson ControlWave, whic...
Fedora: Security Advisory for micro (FEDORA-2022-5038c3236c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for podman-tui (FEDORA-2022-5038c3236c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ImageCast X Terminal Emulator Code Execution
The vulnerability of the software terminal emulator for ImageCast X relates to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
CVE-2020-36558
A NULL pointer dereference flaw was found in the Linux kernel’s Virtual Terminal subsystem was found in how a user calls the VTRESIZEX ioctl. This flaw allows a local user to crash the system...
CVE-2020-36557
A use-after-free flaw was found in the Linux kernel’s Virtual Terminal subsystem in how a user calls the VTDISALLOCATE ioctl during the closing/opening of ttys. This flaw allows a local user to crash the system...
[SECURITY] Fedora 36 Update: micro-2.0.8-6.fc36
Micro is a terminal-based text editor that aims to be easy to use and intuitive, while also taking advantage of the full capabilities of modern terminals. It comes as one single, batteries-included, static binary with no dependencies, and you can download and use it right now. As the name...
Fedora: Security Advisory for 3mux (FEDORA-2022-5ef0bd9a27)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for aerc (FEDORA-2022-5ef0bd9a27)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-github-lunixbochs-vtclean-1.0.0-9.fc36
Clean up raw terminal output by stripping escape sequences, optionally preserving color...
[SECURITY] Fedora 36 Update: golang-github-kyokomi-emoji-2.2.8-6.fc36
Emoji terminal output for Go...
[SECURITY] Fedora 36 Update: golang-github-liamg-tml-0.6.0-3.fc36
A Go module and standalone binary to make the output of colored/formatted text in the terminal easier and more readable...
[SECURITY] Fedora 36 Update: golang-github-insomniacslk-termhook-0-7.20210406gita267c97.fc36
termhook is a small library that attaches to a terminal, serial console or other similar device, and lets you attach your own hook on terminal output...