SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2019:0126-1)

This update for openssh fixes the following issues : Security issues fixed : CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions bsc1121571 CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to...

Cross-site Scripting (XSS)

jquery.terminal is vulnerable to cross-site scripting. It does not properly handle the formatting for backspaces and escape characters for terminal echo, allowing injection of malicious payload if the setting for anyLinks or invokeMethods is true...

Siemens SICAM A8000 Series Denial Of Service

COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: SICAM A8000 Series Vendor: Siemens CSNC ID: CSNC-2019-002 CVE ID: CVE-2018-13798 Subject: SICAM Webinterface XXE DoS Risk: Medium CVSS 3.0 Base Score: 5.3 CVSS 3.0:...

Reflected Cross-Site Scripting

Overview Versions of jquery.terminal prior to 1.21.0 are vulnerable to Reflected Cross-Site Scripting. If the application has either of the options anyLinks or invokeMethods set to true, the application may execute arbitrary JavaScript through crafted malicious payloads due to insufficient...

@eclipse-che/theia-terminal (>=0.0.1-1552991237, <=0.0.1-1566494904), @theia/cpp (>=0.4.0-next.01667bab, <=0.4.0-next.fc6e8217) +7 more potentially affected by CVE-2019-0542 via xterm (3.9.1)

xterm NPM version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on xterm and may be impacted: - @eclipse-che/theia-terminal =0.0.1-1552991237, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab,...

@jango/terminal-extension (>=0.1.0, <=0.1.1), @jiayihu/bdi-ui (>=3.0.1, <=3.0.11) +46 more potentially affected by CVE-2019-0542 via xterm (>=3.0.1, <=3.8.0)

xterm NPM version =3.0.1, =0.1.0, =3.0.1, =0.1.0, =0.17.1, =0.17.0-0, =0.17.0-0, =1.0.105, =1.0.44, =1.0.31, =1.0.116, =0.0.1, =0.0.2, =1.0.3, =1.0.11 - @renku/renku-jupyterlab-ts 0.2.0 and more Source cves: CVE-2019-0542 Source advisory: OSV:GHSA-MC23-976P-J42X...

Shodanploit - Shodan Command Line Interface Written In Python

Shodan is a search engine on the internet where you can find interesting things all over the world. For example, we can find cameras, bitcoin streams, zombie computers, ports with weakness in service, SCADA systems, and more. Moreover, more specific searches are possible. As a result of the searc...

Code injection

Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM9655, SD 835, SDA660...

CVE-2017-18321

Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM9655, SD 835, SDA660...

PT-2019-8274

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile versions MDM9650, MDM9655, SD 835, SDA660 Description A security issue affects the terminal and NW for a session, potentially leading to the leakage of security keys in Snapdragon Mobile. Recommendations For versions MDM9650,...

Fedora 28 : php-symfony (2018-9b54497b6e)

2.8.44 2018-08-01 - security cve-2018-14774 HttpKernel fix trusted headers management in HttpCache and InlineFragmentRenderer nicolas-grekas - security cve-2018-14773 HttpFoundation Remove support for legacy and risky HTTP headers nicolas-grekas - bug 28003 HttpKernel Fixes invalid REMOTEADDR in...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2018:4300-1) (Foreshadow)

This update for xen fixes the following issues : Update to Xen 4.10.2 bug fix release bsc1027519. Security vulnerabilities fixed : CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may...

[SECURITY] Fedora 29 Update: terminology-1.3.2-1.fc29

Fast and lightweight terminal emulator using EFL libraries...

[SECURITY] Fedora 28 Update: terminology-1.3.2-1.fc28

Fast and lightweight terminal emulator using EFL libraries...

openSUSE Security Update : xen (openSUSE-2018-1624) (Foreshadow)

This update for xen fixes the following issues : Update to Xen 4.10.2 bug fix release bsc1027519. Security vulnerabilities fixed : - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, m...

Terminal Services Manager 3.1 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Terminal Services Manager 3.1 - Buffer Overflow SEH Exploit Author: bzyo Twitter: @bzyo Vulnerable Software: Terminal Services Manager 3.1 Vendor Homepage: https://lizardsystems.com Version: 3.1 Software Link:...

Terminal Services Manager 3.1 - Local Buffer Overflow (SEH)

Terminal Services Manager 3.1 - Local Buffer Overflow SEH...

Terminal Services Manager 3.1 - Local Buffer Overflow (SEH)

Exploit Title: Terminal Services Manager 3.1 - Buffer Overflow SEH Date: 2018-12-25 Exploit Author: bzyo Twitter: @bzyo Vulnerable Software: Terminal Services Manager 3.1 Vendor Homepage: https://lizardsystems.com Version: 3.1 Software Link: https://lizardsystems.com/download/tsmanagersetup.exe...

Slack: User-assisted RCE in Slack for macOS (from official site) due to improper quarantine meta-attribute handling for downloaded files

Summary GateKeeper/Quarantine bypass for downloaded files Lack of com.apple.quarantine meta-attribute for downloaded files allows a remote attacker to send an executable file that won't be checked by Gatekeeper . File opening doesn't trigger native alerts from GateKeeper/Quarantine Downloaded...

CVE-2018-20342: Improper Authentication

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...