865 matches found
CVE-2024-36039_PoC
CVE-2024-36039 : Injection d'objets PyMySQL vers injection SQL – PoC Un laboratoire complet et reproductible de Preuve de concept PoC pour CVE-2024-36039 , démontrant comment une vulnérabilité d'injection d'objets dans PyMySQL versions = 1.1.0 peut être escaladée en une injection SQL complète en...
CVE-2026-48813-POC
Flawfinder-ANSI-Exploit-POC 在 Flawfinder 2.0.19 版本中，解析可能恶意的文件名时未进行文件名清理。已知受影响的终端基于 libvte，以下示例展示了一个 mate-terminal。 此漏洞已于 2026年5月17日 由 David Wheeler 和我在 2.0.20 版本中修复。 本仓库包含一个示例 POC bash 脚本以及关于该漏洞工作原理的一些信息。 漏洞利用演练 在示例目录中，可以包含任意数量的文件，如下所示： 这些文件都包含相同的 C 代码： root@kitploit: include void fchar s char...
CVE-2019-12735
CVE-2019-12735 Diese CVE wurde nach neovim 0.3.6 und vim 8.1.1365 behoben POC root@kitploit: vim demo1.txt Remote-Shell 1. Erstelle eine Schadtextdatei: root@kitploit: gcc makedemo3.c -o makedemo3 ./makedemo3 2. Starte den Client in einer anderen Sitzung: root@kitploit: nc -vlp 9999 3. Öffne die...
boa-cve-2009-4496-analysis
CVE-2009-4496 — Defensive Schwachstellenanalyse Überblick Dieses Repository dokumentiert eine defensive Analyse von CVE-2009-4496 , einer historischen Schwachstelle im Zusammenhang mit dem Boa-Webserver. Das Ziel dieses Projekts ist es, die Schwachstelle aus einer defensiven Sicherheitsperspektiv...
CVE-2026-75483 powerlevel10k Control Character Injection via package.json Version
powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the version string to emit arbitrary terminal control sequences on each prompt render when the shell enters affected directori...
PT-2026-76810
Name of the Vulnerable Software and Affected Versions powerlevel10k affected versions not specified Description The software fails to neutralize control characters within the version field of a package.json file when rendering the package prompt segment. This allows an attacker to inject raw esca...
UBUNTU-CVE-2026-73480
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...
CVE-2026-73480 gdu Terminal Injection via Unstripped Escape Sequences
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...
CVE-2026-73480 gdu Terminal Injection via Unstripped Escape Sequences
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...
CVE-2026-73480
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...
CVE-2026-72913
A flaw was found in Kitty, a cross-platform GPU based terminal. This vulnerability allows an attacker to achieve arbitrary code execution by chaining specific escape sequences @kitty-echo and @kitty-ssh when a user displays untrusted terminal data. These sequences write unauthenticated data to th...
CVE-2026-73035 npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences
npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --form...
EUVD-2026-55244
GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with...
CVE-2026-64654
A flaw was found in GitHub CLI gh. Multiple commands within the tool fail to neutralize terminal escape sequences when displaying externally controlled content. An attacker who can influence this content can embed malicious escape sequences. These sequences are then interpreted by a user's...
CVE-2026-64654
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
UBUNTU-CVE-2026-64654
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
CVE-2026-64654 GitHub CLI: Terminal escape sequence injection in multiple `gh` commands
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
CVE-2026-64654 GitHub CLI: Terminal escape sequence injection in multiple `gh` commands
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
CVE-2026-64654
GitHub CLI (gh) prior to v2.97.0 is affected by a terminal escape sequence injection across multiple gh commands due to lack of neutralization for externally supplied content (gist, API, PRs, releases, codespace, etc.). An attacker who can influence that content can embed escape sequences that ar...