[SECURITY] Fedora 36 Update: xen-4.16.1-4.fc36

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 36 Update: vultr-cli-2.14.2-1.fc36

Official command line tool for Vultr services...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

CVE-2021-37778

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

CVE-2022-31238

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure...

gps-sdr-sim 安全漏洞

gps-sdr-sim is a software-defined GPS signal simulator from the individual developers of OSQZSS in Japan. A security vulnerability exists in gps-sdr-sim v1.0, which stems from a buffer overflow when parsing long command line arguments, resulting in a denial of service or code execution...

CVE-2021-37778: Buffer Copy without Checking Size of Input

There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...

PT-2022-10667

Name of the Vulnerable Software and Affected Versions gps-sdr-sim version 1.0 Description The issue is related to a buffer overflow that occurs when parsing long command line parameters. This can potentially lead to Denial of Service DoS or code execution. Recommendations For gps-sdr-sim version...

Jwtear - Modular Command-Line Tool To Parse, Create And Manipulate JWT Tokens For Hackers

A modular command-line tool to parse, create and manipulate JSON Web TokenJWT tokens for security testing purposes. Features Complete modularity. All commands are plugins. Easy to add new plugins. Support JWS and JWE tokens. Easy interface for plugins. follow the template example Flexible token...

CVE-2022-2175

A heap buffer over-read vulnerability was found in Vim's putoncmdline function of the src/exgetln.c file. This issue occurs due to invalid memory access when using an expression on the command line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a...

PT-2022-4735 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.03 and below Description: The issue is related to a command injection vulnerability via the byte 4C0160 function. It is associated with insufficient argument validation for certain CLI commands, which can be exploit...

[SECURITY] Fedora 36 Update: golang-github-cli-gh-0.0.3-1.20220614git9dbbfe2.fc36

A Go module for interacting with gh and the GitHub API from the command line...

[SECURITY] Fedora 36 Update: gh-2.12.1-1.fc36

GitHub=EF=BF=BD=EF=BF=BD=EF=BF=BDs official command line tool...

Fedora: Security Advisory for gh (FEDORA-2022-c2ca66a0f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Adaptive Security Appliances Software 安全漏洞

Cisco Adaptive Security Appliances Software ASA Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides highly secure access to data and network resources and other features. A security vulnerability exists in the CLI parser of the...

The c_rehash script allows command injection

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

Malicious code in studiolabs-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 774a5acf223bc43b7d38d81865b7bddd2c0ed567c1fd323dfd1f5e670bed15f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-cli-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb10e3aadb85207426e2f19a15effbe518d2292152d572f7bdd6e0f3fd24b0e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...