wolfssl

Biblioteca SSL/TLS embebida wolfSSL La biblioteca SSL embebida wolfSSL anteriormente CyaSSL es una biblioteca SSL/TLS ligera escrita en ANSI C y orientada a entornos embebidos, RTOS y con recursos limitados - principalmente debido a su pequeño tamaño, velocidad y conjunto de características...

CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC En la versión 2.0.19 de Flawfinder, no se realiza una sanitización de nombres de archivo al analizar posibles nombres de archivo maliciosos. Los terminales afectados conocidos son los basados en libvte, y el ejemplo a continuación muestra un mate-terminal. Este exploit...

CVE-2021-45067

CVE-2021-45067 Este error fue Out of Bounds Read causado por tratar la cadena ANSI como Unicode, lo que puede ser explotado para filtrar información sensible del proceso de Adobe Reader en un entorno aislado. Blog Adobe Reader - XFA - ANSI - Fuga de Información por Confusión Unicode Aviso...

My-Presentation-Slides

Mis diapositivas de presentaciones Diapositivas de presentaciones públicas de Orange Tsai. Puedes encontrarme en: Blog: https://blog.orange.tw/ Correo: [email protected] Twitter: @orange8361 2024 WorstFit: Revelando transformadores ocultos en Windows ANSI! Black Hat Europe DEVCORE CONF 2025...

Linux Distros Unpatched Vulnerability : CVE-2026-103431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it,...

CVE-2019-12735

CVE-2019-12735 Este CVE fue corregido después de neovim 0.3.6 y vim 8.1.1365 POC vim demo1.txt Shell remota 1. Crea el archivo de texto malicioso: gcc makedemo3.c -o makedemo3 ./makedemo3 2. Compila el cliente en otra sesión: nc -vlp 9999 3. Abre el archivo malicioso: vim demo3.txt Y luego, puede...

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

SummaryThe /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters.A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in an...

EUVD-2026-90576

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-103431 Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

PoC-CVE-2020-9715

CVE-2020-9715 Prueba de concepto de validación de EDR Use-after-free en el caché de ESObject de EScript.api de Adobe Acrobat Reader DC. Solo para pruebas autorizadas de EDR por equipos rojos. Vulnerabilidad Adobe Acrobat Reader DC = 2020.009.20063. El motor EScript almacena en caché objetos...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc (CENTOS7:CLSA-2026:1768310750)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1768310750 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and fu...

AlmaLinux 9.2 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (ALMALINUX9.2:CLSA-2025:1761744708)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1761744708 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations an...

Rocky Linux 9 [CIQ] Security Update: less / less-debuginfo / less-debugsource (crlsa-2023_3725)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233725 advisory. less: crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal CVE-2022-46663 Tenable has extracted the preceding description blo...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.5:CLSA-2025:1750352922)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1750352922 advisory. - Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported...

cve-2024-52005-poc

CVE-2024-52005: Inyección de Secuencias de Escape ANSI en Git Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra CVE-2024-52005, una vulnerabilidad en Git que permite la inyección de secuencias de escape ANSI a través del canal sideband durante operaciones de Git...

CentOS Linux 8 [TuxCare] Security Update: git / git-all / git-core-doc / git-credential-libsecret / etc (CENTOS-STREAM8:CLSA-2025:1749743573)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1749743573 advisory. - Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transport...

CentOS Linux 8.4 [TuxCare] Security Update: git-all / git-core / git-credential-libsecret / git-email / etc (CENTOS8.4:CLSA-2025:1750338301)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1750338301 advisory. - Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.5:CLSA-2025:1757663366)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1757663366 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations an...

AlmaLinux 9.2 [TuxCare] Security Update: pki-servlet-4.0-api / pki-servlet-engine Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775646020)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775646020 advisory. - Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly...