CVE-2020-9067

There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal OLT. Affected product versions include:SmartAX MA5600T...

PT-2020-4208

Name of the Vulnerable Software and Affected Versions: SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10 SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10 SmartAX EA5800 versions V100R018C00,...

CVE-2019-12379

A flaw was discovered in the Linux kernel's coninsertunipair function in drivers/tty/vt/consolemap.c. An attacker, with local physical access to the system and local virtual terminal level access, is able to leak memory in certain cases of ENOMEM outcomes of kmalloc...

ConEmu - Customizable Windows Terminal With Tabs, Splits, Quake-Style, Hotkeys And More

ConEmu-Maximus5 is a Windows console emulator with tabs, which represents multiple consoles as one customizable GUI window with various features. Initially, the program was created as a companion to Far Manager, my favorite shell replacement - file and archive management, command history and...

openITCOCKPIT Command Execution Vulnerability

It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. A security vulnerability exists in the Web-based terminal in It-novum openITCOCKPIT versions prior to 3.7.3. An attacker can exploit this vulnerability to execute arbitrary operating system commands wi...

CVE-2020-10789

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

Design/Logic Flaw

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

CVE-2020-10789

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

CVE-2020-10789

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

CVE-2020-10789

OpenITCOCKPIT prior to version 3.7.3 exposes a web-based terminal that can execute arbitrary OS commands due to mishandling of shell metacharacters in the su path (app/Lib/SudoMessageInterface.php). Affected product/component: OpenITCOCKPIT web UI; root cause: improper handling of shell metachara...

PT-2020-12323

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3 Description The issue allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php. This is related to a web-base...

CVE-2020-10789: Improper Neutralization of Special Elements used in an OS Command

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

Active Defense Bypass Vulnerability in the Core Component of SmartMass Endpoint Security

Wisdom Terminal Security, Wisdom Terminal Security is a computer system security and protection software newly developed in 2018. There is an active defense bypass vulnerability in the core component of Wise Terminal Security, which can be exploited by attackers to construct malformed PE samples...

Tellabs Optical Line Terminal Authorization Issue Vulnerability

Tellabs Optical Line Terminal OLI is an optical line terminal product from Tellabs, Inc. An authorization issue vulnerability exists in Tellabs OLT 1150 FP version 29.2015873, which can be exploited by an attacker to execute commands...

CVE-2019-19148: Improper Neutralization of Special Elements used in an OS Command

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...

PT-2020-10064

Name of the Vulnerable Software and Affected Versions Tellabs Optical Line Terminal OLT 1150 versions prior to SR30.1 and SR31.1 Description The issue allows for Remote Command Execution via the -l option to TELNET or SSH. Recommendations For versions prior to SR30.1, update to SR30.1 or later. F...

CVE-2020-7006

Systech Corporation NDS-5000 Terminal Server, NDS/5008 8 Port, RJ45, firmware Version 02D.30. Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution...

Remote code execution

Systech Corporation NDS-5000 Terminal Server, NDS/5008 8 Port, RJ45, firmware Version 02D.30. Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution...

CVE-2020-7006

CVE-2020-7006 affects Systech NDS-5000 Terminal Server/NDS-5008 (8 Port, RJ45) firmware version 02D.30. The issue is a stored cross-site scripting (CWE-79) vulnerability in the WEB application, enabling potential client-side code execution and information disclosure with remote impact. Affected p...

CVE-2020-7006

Systech Corporation NDS-5000 Terminal Server, NDS/5008 8 Port, RJ45, firmware Version 02D.30. Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution...