CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC Flawfinder के संस्करण 2.0.19 में, संभावित दुर्भावनापूर्ण फ़ाइलनामों को पार्स करते समय कोई फ़ाइलनाम सैनिटाइज़ेशन नहीं होता है। ज्ञात प्रभावित टर्मिनल libvte-आधारित हैं, और नीचे दिया गया उदाहरण एक mate-terminal दिखाता है। यह शोषण तब से संस्करण 2.0.20 में 5/17/26 को David...

CVE-2019-12735

CVE-2019-12735 यह CVE neovim 0.3.6 और vim 8.1.1365 के बाद ठीक किया गया था। POC root@kitploit: vim demo1.txt रिमोट शेल 1. मैलवेयर टेक्स्ट फ़ाइल बनाएँ: root@kitploit: gcc makedemo3.c -o makedemo3 ./makedemo3 2. दूसरे सत्र में क्लाइंट बनाएँ: root@kitploit: nc -vlp 9999 3. मैलवेयर फ़ाइल खोलें:...

cve-2024-52005-poc

CVE-2024-52005: Git में ANSI एस्केप सीक्वेंस इंजेक्शन अवलोकन इस रिपॉजिटरी में CVE-2024-52005 का प्रूफ-ऑफ-कॉन्सेप्ट PoC है, जो Git में एक कमज़ोरी है जो Git संचालन के दौरान साइडबैंड चैनल के माध्यम से ANSI एस्केप सीक्वेंस इंजेक्शन की अनुमति देती है। CVE-2024-52005 एक उच्च गंभीरता CVSS 7.5 की कमज़ोरी...

CVE-2026-81707

opensslencrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows o...

CVE-2026-81707 openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email

opensslencrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows o...

EUVD-2026-67063

opensslencrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows o...

CVE-2026-81707 openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email

opensslencrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows o...

CVE-2026-81707

openssl_encrypt versions before 1.4.9 fail to sanitize the email field in imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed in the terminal. The attack can be delivered through normal contact-exchange flows or ke...

PT-2026-82608

openssl encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows ...

SUSE CVE-2026-66486

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with...

CVE-2026-48813

A flaw was found in Flawfinder. An improper input neutralization issue leads to output manipulation, specifically, terminal/ANSI escape sequence injection and XML injection. A malicious filename can inject arbitrary content in the terminal output and improperly sanitized fields such as filenames,...

CVE-2026-66486

A flaw was found in GNU cpio. This vulnerability occurs in the archive member listing functionality, where member names are printed directly without proper encoding or escaping. A remote attacker could craft a malicious cpio archive containing specially designed member names with embedded newline...

CVE-2026-48813

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

UBUNTU-CVE-2026-48813

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

CVE-2026-48813 Flawfinder output manipulation via untrusted filenames and source text

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

CVE-2026-48813

Vulnerability summary (CVE-2026-48813) : Flawfinder (C/C++ static analysis tool) versions prior to 2.0.20 are affected by improper input neutralization causing output manipulation. Specifically, untrusted inputs (filenames, categories, code context) can introduce Terminal/ANSI Escape Sequence Inj...

CVE-2026-48813 Flawfinder output manipulation via untrusted filenames and source text

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

CVE-2026-48813

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

CVE-2026-48813 Flawfinder output manipulation via untrusted filenames and source text

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...