[SECURITY] Fedora 24 Update: tmux-2.2-1.fc24

tmux is a "terminal multiplexer." It enables a number of terminals or windows to be accessed and controlled from a single terminal. tmux is intended to be a simple, modern, BSD-licensed alternative to programs such as GNU Screen...

ChinaSoft Unified Terminal Security Management System Client Arbitrary Uninstallation Vulnerability

ChinaSoft Unified Terminal Security Management System is a comprehensive system management software that can guarantee system security. With the loophole of arbitrary uninstallation of the client of ChinaSoft Unified Terminal Security Management System, ordinary users who do not have administrato...

Linux kernel 'drivers/tty/tty_io.c' denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the ttyopen function in the drivers/tty/ttyio.c file in versions of Linux kernel prior to 3.1.1. A local attacker can exploit this...

UBUNTU-CVE-2011-5321

The ttyopen function in drivers/tty/ttyio.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via crafted access to a device file under the...

CVE-2016-2204

The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...

CVE-2016-2204

The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...

Input validation

The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...

CVE-2016-2204

The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...

Linux Vulnerability Scanner: Vuls

Vulnerability scanner for Linux, agentless, written in golang For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in production environment, it is common for system administrator to choose not to use...

CVE-2016-3985

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

Session fixation

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2016-3985

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

USN-2948-1 linux-lts-utopic vulnerabilities

Ralf Spenneberg discovered that the USB driver for Clie devices in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service system crash. CVE-2015-7566 Ralf Spenneberg discovered that the usbvision driver in...

Airport Terminal - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Airport Terminal published at the 'play' market has multiple vulnerabilities...

NovaTime Terminal - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NovaTime Terminal published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2016-2856

ptchown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10...

Wordpress-Exploit-Framework - A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems

A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems. What do I need to run it? Ensure that you have Ruby 2.2.x installed on your system and then install all required dependencies by opening a command prompt / terminal in...

Veris: Critical IDOR - Get Authentication Details of any Terminal/Gatekeeper

Hello Team, I have found a critical IDOR using which an attacker can get authentication details of any gatekeeper/terminal remotely by just changing the value of gatekeeper/terminal id. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get anyone's Terminal Data remotely

Hello Team, I have found a critical IDOR using which an attacker can get anyone's terminal data remotely by just changing the terminal/gatekeeper id. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Delete any terminal/gatekeeper of any organization remotely

Hello Team, I have found a critical IDOR issue due to which an attacker can easily detele any terminal/gatekeeper of any organization by just changing the ID. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...