Design/Logic Flaw

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

PT-2019-13671

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 78.0.18 Description The issue arises from cPanel unsafely determining terminal capabilities by using infocmp. Recommendations For versions prior to 78.0.18, update to version 78.0.18 or later to resolve the issue...

FreeBSD pts resource management error vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. pts is a pseudo-terminal driver used in it. A security vulnerability exists in FreeBSD pts. An attacker can exploit this vulnerability to cause a denial of service and possibly run code...

Arbitrary Password Reset Vulnerability in Shengteng Cloud Terminal Management System

Ltd. is a core subsidiary of a listed company, StarNet Ruijie Communications Co. An arbitrary password reset vulnerability exists in the Shengteng Cloud Terminal Management System, which can be exploited by attackers to reset arbitrary passwords...

CVE-2019-0887

CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...

Passpie - Multiplatform Command-Line Password Manager

Passpie is a command line tool to manage passwords from the terminal with a colorful and configurable interface. Use a master passphrase to decrypt login credentials, copy passwords to clipboard, syncronize with a git repository, check the state of your passwords, and more. Password files are...

Unauthorized Access Vulnerability in Qinghan Technology QH-S302 Terminal Display Device

Qinghan Technology QH-S302 terminal display device is the terminal part of the information release system. An unauthorized access vulnerability exists in the QH-S302 terminal display device, which can be exploited by an attacker to obtain sensitive information...

WPZD-163(II) Distribution Grid Integration Measurement and Control Terminal has Logic Flaw Vulnerability

Xuji Group Co., Ltd. is a high-tech modern industrial group specializing in electric power, automation and intelligent manufacturing. WPZD-163II Power Distribution Grid Integration Measurement and Control Terminal suffers from a logic flaw vulnerability that can be exploited by attackers to...

Bug in Anesthesia Respirators Allows Cyber-Tampering

A vulnerability in GE Healthcare’s Aestiva and Aespire anesthesia devices would allow an unauthenticated cybercriminal on the same network as the device to modify gas composition parameters within the devices’ respirator function, thus changing sensor readings for gas density. According to GE...

CVE-2019-10966

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...

CVE-2019-10966

CVE-2019-10966 affects GE Aestiva and Aespire anesthesia devices (7100/7900) where serial ports extended to TCP/IP via an unsecured terminal server. Root cause is improper authentication, enabling remote modification of device configuration and silencing of alarms without user interaction. The IC...

PT-2019-12107

Name of the Vulnerable Software and Affected Versions GE Aestiva versions 7100 GE Aespire versions 7900 Description A vulnerability exists in the specified GE Aestiva and Aespire versions where serial devices connected via an added unsecured terminal server to a TCP/IP network configuration could...

CVE-2019-10966: Improper Authentication

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...

GE Aestiva and Aespire Anesthesia (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: Aestiva and Aespire Anesthesia Vulnerability: Improper Authentication 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSMA-19-190-01 GE...

Whonix v15 - Anonymous Operating System

Whonix is an operating system focused on anonymity, privacy and security. It’s based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user’s real IP. Whonix consists of two parts: One...

NetSet - Operational Security Utility And Automator

Operational Security utility and automator. NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by NetSet will be...

June 27, 2019—KB4501375 (OS Build 18362.207)

None None...

Linux/x86_64 - Reverse(0.0.0.0:4444/TCP) Shell (/bin/sh) Shellcode (70 bytes)

/ Title: Linux/x8664 - Reverse0.0.0.0:4444/TCPShell/bin/sh- Null Free Shellcode ;Author: Aron Mihaljevic ;Architecture: Linux x8664 ;Shellcode Length: 70 bytes ;github = https://github.com/STARRBOY compilation and execution of assembly code ------------------------------------- nasm -felf64...

Buffer Overflow Vulnerability in Realterm Serial Termianl Software

Realterm is an engineer's terminal program designed specifically for capturing, controlling and debugging binary and other difficult data streams. A buffer overflow vulnerability exists in the Realterm Serial Termianl software that can be exploited by an attacker to cause a denial of service to t...

BlueGhost - A Network Tool Designed To Assist Blue Teams In Banning Attackers From Linux Servers

This tool utilizes various linux network tools and bash scripting to assist blue teams on defending debian and ubuntu based servers from malicious attackers. Scan/Ban shows connected IPs, scans IP addresses for open ports using nmap and whois search to gather reconnaissance on connected IPs, show...