8275 matches found
The vulnerability of the AAC stream processing tool faad, related to segmentation errors, allows a perpetrator to trigger a service failure.
The vulnerability of the AAC stream processing tool faad is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...
Design/Logic Flaw
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Cisco FindIT Network Management Software Static Credentials Vulnerability
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
UACME - Defeating Windows User Account Control
Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. System Requirements x86-32/x64 Windows 7/8/8.1/10 client, some methods however works on server version too. Admin account with UAC set on default settings required. Usage Run executable from command line:...
Cloud Foundry Command Line Interface Information Disclosure Vulnerability
Cloud Foundry CLI is a command line client program for Cloud Foundry from the Cloud Foundry Foundation in the United States. An information disclosure vulnerability exists in Cloud Foundry CLI versions prior to v6.43.0. A remote attacker can exploit this vulnerability to obtain some or all user...
The vulnerability of the command-line interface of the Cisco Unified Communications Domain Manager allows a attacker to execute arbitrary commands.
The vulnerability of the command-line interface of the Cisco Unified Communications Domain Manager is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...
Passpie - Multiplatform Command-Line Password Manager
Passpie is a command line tool to manage passwords from the terminal with a colorful and configurable interface. Use a master passphrase to decrypt login credentials, copy passwords to clipboard, syncronize with a git repository, check the state of your passwords, and more. Password files are...
Cloud Security Audit - A Command Line Security Audit Tool For Amazon Web Services
A command line security audit tool for Amazon Web Services About Cloud Security Audit is a command line tool that scans for vulnerabilities in your AWS Account. In easy way you will be able to identify unsecure parts of your infrastructure and prepare your AWS account for security audit...
CVE-2019-13475
In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute...
Design/Logic Flaw
In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute...
CVE-2019-13475
CVE-2019-13475 affects Mobatek MobaXterm 11.1. The vulnerability is in the mobaxterm: URI handler, enabling an argument injection that allows an attacker to execute arbitrary commands when a user visits a crafted URL. The payload can inject -exec to run commands, with -hideterm and -exitwhendone ...
Rifiuti2 - Windows Recycle Bin Analyser
Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently removed. For...
Invoxia NVX220 Trust Management Issues Vulnerability
The Invoxia NVX220 is an IP telephone from the French company Invoxia. A trust management issue vulnerability exists in Invoxia NVX220. An attacker could exploit the vulnerability to access a customized CLI...
MariaDB: Path traversal in command line client
The command line client has a directory traversal bug which allows server chosen files to be dlopened when it connects to a malicious server. The path can also be padded with / characters so that strxnmov drops the .so extension. The dlopen call is performed here: Impact In rare situations where...
Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack
The prevailing perception about fileless threats, among the security industry’s biggest areas of concern today, is that security solutions are helpless against these supposedly invincible threats. Because fileless attacks run the payload directly in memory or leverage legitimate system tools to r...
CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
DEBIAN-CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...