181 matches found
Electerm 操作系统命令注入漏洞
Electerm is a SSH/SFTP client developed by ZXDong262 from China, based on Electron. Versions of Electerm prior to 3.7.9 contained an operating system command injection vulnerability. This vulnerability stemmed from the lack of filename cleaning in the SFTP editing function, which could allow...
Electerm 参数注入漏洞
Electerm is a SSH/SFTP client developed by ZXDong262 from China, based on Electron. Versions of Electerm 3.8.15 and earlier have a parameter injection vulnerability. This vulnerability arises from the fact that the terminal hyperlink processor does not validate URLs with respect to protocols. Thi...
electerm has Command Injection via runLinux funtion
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux function appends attacker-controlled remote version strings directly into an exec"rm -r...
Arbitrary Command Injection
Overview electerm is an open-sourced terminal/ssh/telnet/serialport/sftp client Affected versions of this package are vulnerable to Arbitrary Command Injection via the runLinux function. An attacker can execute arbitrary system commands, tamper with local files, and escalate compromise of...
GHSA-8X35-HPH8-37HQ electerm has Command Injection via runLinux funtion
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux function appends attacker-controlled remote version strings directly into an exec"rm -r...
PT-2026-35151
Name of the Vulnerable Software and Affected Versions electerm affected versions not specified Description A command injection issue exists in the runLinux function within github.com/elcterm/electerm/npm/install.js:130. The function appends remote version strings, which can be controlled by an...
Command Injection
Overview electerm is an open-sourced terminal/ssh/telnet/serialport/sftp client Affected versions of this package are vulnerable to Command Injection via the runMac and runLinux functions. An attacker can execute arbitrary system commands and compromise the system by supplying malicious remote...
GHSA-WXW2-RWMH-VR8F electerm: electerm_install_script_CommandInjection Vulnerability Report
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...
electerm: electerm_install_script_CommandInjection Vulnerability Report
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...
CVE-2020-23256
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...
EUVD-2023-0585
Malicious code in bioql PyPI...
Gather electerm Passwords
This module will determine if electerm is installed on the target system and, if it is, it will try to dump all saved session information from the target. The passwords for these saved sessions will then be decrypted where possible. Module Options msf use post/multi/gather/electerm msf postelecte...
electerm allows unauthorized users to execute arbitrary commands
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service...
GHSA-X73W-G8HX-V7RP electerm allows unauthorized users to execute arbitrary commands
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service...
CVE-2020-23256
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...
CVE-2020-23256
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...
Code injection
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...
CVE-2020-23256
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...
CVE-2020-23256
CVE-2020-23256 affects Electerm 1.3.22. The issue allows an attacker to execute arbitrary code via an unverified request to the Electerm service. The available connected documents confirm the vulnerability description but do not specify affected component details beyond Electerm and version, nor ...
