bzip2recover DoS

The vulnerability of the bzip2recover restoration tool is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by entering a specially crafted sequence of data into the command line...

Nettle Hash Segmentation Error DoS

The vulnerability of the nettle-hash cryptographic hash function lies in segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure in an application by entering a specially crafted sequence of data into the command line...

xkbevd Segmentation Error DoS

The vulnerability of xkbevd is caused by segmentation errors. Exploiting this vulnerability allows an attacker to cause a service failure for the daemon by entering a specially crafted sequence of data into the command line...

pdftops Heap Buffer Overflow DoS

The vulnerability of the PDF document conversion utility in the pdftops format within the poppler-utils package relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by entering a specially crafted sequence of data in the...

connection tool Parallel Port Segmentation Error DoS

The vulnerability of the connection utility to scanners using the parallel port umaxpp is related to segmentation errors. Exploiting this vulnerability can allow a perpetrator to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

fly-mineapps File Manager Type Association DoS

The vulnerability of the fly-mineapps file manager’s type association utility is caused by buffer overflow during the processing of command-line parameters. Exploiting this vulnerability can allow an attacker to cause a service failure by entering a specially crafted sequence of data in the comma...

Virtual Distributed Ethernet Switch Segmentation Error DoS

The vulnerability of the Virtual Distributed Ethernet Switch vdel3 is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

faad Segmentation Error DoS

The vulnerability of the AAC stream processing tool faad is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

Design/Logic Flaw

A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...

Cisco FindIT Network Management Software Static Credentials Vulnerability

A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...

UACME - Defeating Windows User Account Control

Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. System Requirements x86-32/x64 Windows 7/8/8.1/10 client, some methods however works on server version too. Admin account with UAC set on default settings required. Usage Run executable from command line:...

Cloud Foundry Command Line Interface Information Disclosure Vulnerability

Cloud Foundry CLI is a command line client program for Cloud Foundry from the Cloud Foundry Foundation in the United States. An information disclosure vulnerability exists in Cloud Foundry CLI versions prior to v6.43.0. A remote attacker can exploit this vulnerability to obtain some or all user...

Cisco Unified Communications Domain Manager Command Execution

The vulnerability of the command-line interface of the Cisco Unified Communications Domain Manager is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

Passpie - Multiplatform Command-Line Password Manager

Passpie is a command line tool to manage passwords from the terminal with a colorful and configurable interface. Use a master passphrase to decrypt login credentials, copy passwords to clipboard, syncronize with a git repository, check the state of your passwords, and more. Password files are...

CVE-2019-1010039: Out-of-bounds Write

uLaunchELF commit 170827a is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Loader program loader.c overly trusts the arguments provided via command line...

Cloud Security Audit - A Command Line Security Audit Tool For Amazon Web Services

A command line security audit tool for Amazon Web Services About Cloud Security Audit is a command line tool that scans for vulnerabilities in your AWS Account. In easy way you will be able to identify unsecure parts of your infrastructure and prepare your AWS account for security audit...

CVE-2019-13475

In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute...

Design/Logic Flaw

In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute...

CVE-2019-13475

CVE-2019-13475 affects Mobatek MobaXterm 11.1. The vulnerability is in the mobaxterm: URI handler, enabling an argument injection that allows an attacker to execute arbitrary commands when a user visits a crafted URL. The payload can inject -exec to run commands, with -hideterm and -exitwhendone ...

Invoxia NVX220 Trust Management Issues Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. A trust management issue vulnerability exists in Invoxia NVX220. An attacker could exploit the vulnerability to access a customized CLI...