[jSQL Injection v0.5] Java tool for automatic database injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. jSQL Injection change log - version 0.5 0.5 SQL shell Uploader 0.4 Admin page checker and preview Brute forcer md5...

sudo: bypass of tty_tickets constraints

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the ttytickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another...

Low: Red Hat Security Advisory: sudo security and bug fix update

An updated sudo package that fixes multiple security issues and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

sudo: bypass of tty_tickets constraints

sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard...

httpd: mod_rewrite allows terminal escape sequences to be written to the log file

modrewrite.c in the modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator...

Amazon Linux AMI : httpd (ALAS-2013-193)

Cross-site scripting XSS flaws were found in the modproxybalancer module's manager web interface. If a remote attacker could trick a user, who was logged into the manager web interface, into visiting a specially crafted URL, it would lead to arbitrary web script execution in the context of the...

Amazon Linux AMI : httpd24 (ALAS-2013-194)

Cross-site scripting XSS flaws were found in the modproxybalancer module's manager web interface. If a remote attacker could trick a user, who was logged into the manager web interface, into visiting a specially crafted URL, it would lead to arbitrary web script execution in the context of the...

PT-2020-7198

Name of the Vulnerable Software and Affected Versions poppler versions prior to 0.21.4 Description The issue allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator. This is due to an error in the error function in Error.cc...

FreeBSD -- Kernel memory disclosure in sctp(4)

Problem Description: When initializing the SCTP state cookie being sent in INIT-ACK chunks, a buffer allocated from the kernel stack is not completely initialized. Impact: Fragments of kernel memory may be included in SCTP packets and transmitted over the network. For each SCTP session, there are...

PuTTY 'getstring()'函数多个整数溢出漏洞

BUGTRAQ ID: 61599 CVECAN ID: CVE-2013-4852 PuTTY是Windows和Unix平台上的PuTTYTelnet和SSH的实现，带有xterm终端模拟器。 PuTTY 0.62在处理SSH握手时，负握手消息长度可触发堆缓冲区溢出漏洞，成功后可以当前用户权限执行任意代码。要利用此漏洞需要诱使用户连接到恶意服务器。 0 Simon Tatham PuTTY 0.61 Simon Tatham PuTTY 0.60 Simon Tatham PuTTY 0.59 Simon Tatham PuTTY 0.56 Simon Tatham PuTTY 0.5...

Moderate: Red Hat Security Advisory: httpd security update

An update for the Apache HTTP Server component of Red Hat JBoss Web Server 2.0.1 that fixes two security issues is now available from the Red Hat Customer Portal for Red Hat Enterprise Linux 5 and 6, Solaris, and Microsoft Windows. The Red Hat Security Response Team has rated this update as havin...

httpd: mod_rewrite allows terminal escape sequences to be written to the log file

modrewrite.c in the modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator...

Fedora Update for konsole FEDORA-2013-13499

Check for the Version of konsole OpenVAS Vulnerability Test Fedora Update for konsole FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for konsole FEDORA-2013-13112

Check for the Version of konsole OpenVAS Vulnerability Test Fedora Update for konsole FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Kingfisher Debug Terminal Detection

Binary data 6962.prm...

[SECURITY] Fedora 17 Update: konsole-4.10.5-1.fc17

KDE Terminal emulator...

[SECURITY] Fedora 18 Update: konsole-4.10.5-1.fc18

KDE Terminal emulator...

[SECURITY] Fedora 18 Update: nodejs-ansi-0.2.0-1.fc18

ansi.js is a module for Node.js that provides an easy-to-use API for writing ANSI escape codes to Stream instances. ANSI escape codes are used to do fan cy things in a terminal window, like render text in colors, delete characters, lines, the entire window, or hide and show the cursor, and lots...

Oracle Linux 5 : xterm (ELSA-2009-0018)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-0018 advisory. 215-5.el52.2 - Fix CVE-2008-2383 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

CentOS 4 : xterm (CESA-2007:0701)

An updated xterm package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and...