4971 matches found
Fedora 21 : audit-2.4.4-1.fc21 (2015-13471)
This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Cisco ASR 9000 Series Router vty session closure denial of service vulnerability
The Cisco ASR 9000 is Cisco's ultra-high-capacity, carrier-grade edge router platform designed for next-generation IP network IP NGN transformation. A security vulnerability exists in the Cisco ASR 9000 series routers that allows local users to exploit the vulnerability to shut down VTY sessions ...
PT-2015-3403 · Openbsd +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 6.8 through 6.9 Description: The issue is related to the sshd service in OpenSSH, which has inadequate access control for certain functions. This allows local users to cause a denial of service, specifically terminal...
[SECURITY] Fedora 22 Update: xrdp-0.9.0-4.fc22
The goal of this project is to provide a fully functional Linux terminal server, capable of accepting connections from rdesktop and Microsoft's own terminal server / remote desktop clients...
[SECURITY] Fedora 21 Update: xrdp-0.6.1-11.fc21
The goal of this project is to provide a fully functional Linux terminal server, capable of accepting connections from rdesktop and Microsoft's own terminal server / remote desktop clients...
ZOC Terminal Emulator 7 - Quick Connection Crash (PoC)
ZOC Terminal Emulator 7 - Quick Connection Crash PoC !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: ZOC Terminal Emulator-v7 Memory Corruption PoC + Date: 14-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: http://www.emtec.com + Download:...
ZOC Terminal Emulator 7 - Quick Connection Crash (PoC)
!/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: ZOC Terminal Emulator-v7 Memory Corruption PoC + Date: 14-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: http://www.emtec.com + Download: http://www.emtec.com/downloads/zoc/zoc7051.exe + Sites:...
X11 Keyboard Command Injection
This module exploits open X11 servers by connecting and registering a virtual keyboard. The virtual keyboard is used to open an xterm or gnome terminal and type and execute the specified payload. This module requires Metasploit: https://metasploit.com/download Current source:...
Cisco IOS TCL Interpreter Privilege Elevation Vulnerability
Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the Cisco IOS TCL interpreter due to the program failing to properly maintain the 'vty' state. Allowing a local attacker to exploit the vulnerability could gain privileges by opening a...
Cross site request forgery (csrf)
The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...
IDS RTU 850 Series Directory Traversal Vulnerability
The NC854 and NC856 modules for IDS RTU 850C devices are communication modules for use in automation and remote control devices from IDS Germany. A directory traversal vulnerability exists in the NC854 and NC856 modules for IDS RTU 850C devices. A remote attacker can read arbitrary files with the...
Wavelink Terminal Emulation 'LicenseServer.exe' Remote Code Execution Vulnerability
Wavelink Emulation ConnectPro TermProxy is a product from Wavelink that provides a stable connection environment for Wavelink Terminal Emulation TE, Terminal Emulation. A remote code execution vulnerability exists in Wavelink Terminal Emulation 'LicenseServer.exe', which allows attackers to explo...
CVE-2015-4059
Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...
CVE-2015-4059
Affected software: Wavelink Emulation License Server (LicenseServer.exe). Vulnerability type and root cause: Heap-based buffer overflow caused by unsafe handling when parsing HTTP headers, leading to a heap corruption due to an unsafe memory block copy operation. Impact and exploitability: Remote...
CVE-2015-4059
Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...
SmarTTY - Multi-tabbed SSH Client with SCP Support
SmarTTY is a free multi-tabbed SSH client that supports copying files and directories with SCP on-the-fly and editing files in-place. One SSH session - multiple tabs Most SSH servers support up to 10 sub-sessions per connection. SmarTTY makes the best of it: no annoying multiple windows, no need ...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality and integrity of protected information.
The vulnerability in the terminal package up to version 0.2.6p25931 of the Gentoo Linux operating system can lead to violations of privacy and the integrity of protected information. This vulnerability can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the fte-terminal package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
MobaXterm - Terminal for Windows with X11 server, tabbed SSH client, network tools and much more...
MobaXterm is your ultimate toolbox for remote computing. In a single Windows application, it provides loads of functions that are tailored for programmers, webmasters, IT administrators and pretty much all users who need to handle their remote jobs in a more simple fashion. MobaXterm provides all...