CVE-2021-20074

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

Design/Logic Flaw

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

CVE-2021-20074

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

tuned bug fix and enhancement update

The tuned packages provide a service that tunes system settings according to a selected profile. Bug Fixes and Enhancements: AlmaLinux-8.2 Tuned causes duplication of kernel comand line flags. BZ1918995...

nmstate bug fix and enhancement update

Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner. Bug Fixes and Enhancements: Only a default gw is supported per device BZ1910193 SR-IOV i40e After setting SR-IOV number of VFs, nmstate reports success before VFs links are...

Cisco IOS XR Unauthorized Access

The vulnerability of the Cisco IOS XR operating system’s command-line interface CLI is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2021-13752

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue in Racom's MIDGE Firmware allows users to escape the provided command line interface and execute arbitrary OS commands. Recommendations: For version 4.4.40.105, consider...

PT-2021-1012

Name of the Vulnerable Software and Affected Versions: dbxtool affected versions not specified Description: The issue concerns the dbxtool packages, which provide a command line utility and a one-shot systemd service for applying UEFI Secure Boot DBX updates. A bug has been identified where dbxto...

CVE-2021-20074: Improper Neutralization of Special Elements used in an OS Command

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

PYSEC-2021-86

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...

CVE-2021-23338

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...

Fedora: Security Advisory for zypper (FEDORA-2021-ebc1c35c5d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Darkdump - Search The Deep Web Straight From Your Terminal

Darkdump is a simple script written in Python3.9 in which it allows users to enter a search term query in the command line and darkdump will pull all the deep web sites relating to that query. Darkdump wraps up the darksearch.io API. Installation 1. git clone https://github.com/josh0xA/darkdump 2...

[SECURITY] Fedora 33 Update: zypper-1.14.42-1.fc33

Zypper is a command line package manager tool using libzypp, which can be used to manage software for RPM based systems...

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

GNU Screen Denial of Service Vulnerability (CNVD-2021-13240)

GNU Screen is a freeware program developed by the GNU Project for switching between command-line terminals. It allows users to connect to multiple local or remote command line sessions at the same time and switch between them freely. A denial of service vulnerability exists in encoding.c in GNU...

Fedora: Security Advisory for pngcheck (FEDORA-2021-e24167b0e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-2173 · Microsoft · Azure Iot Cli Extension

Name of the Vulnerable Software and Affected Versions: Azure IoT CLI extension affected versions not specified Description: The issue is related to errors in privilege management in the Azure IoT CLI interface. Exploitation of this issue may allow an attacker to elevate their privileges...

Cisco SD-WAN CLI Compromise

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

CVE-2020-7782 Command Injection

This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package...