CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC In version 2.0.19 of Flawfinder, no filename sanitization occurs when parsing possibly malicious filenames. Known affected terminals are libvte based, and the example below shows a mate-terminal. This exploit has since been fixed in version 2.0.20 as of 5/17/26 by Davi...

CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

boa-cve-2009-4496-analysis

CVE-2009-4496 — Defensive Vulnerability Analysis Overview This repository documents a defensive analysis of CVE-2009-4496 , a historical vulnerability associated with the Boa web server. The objective of this project is to examine the vulnerability from a defensive security perspective through:...

CVE-2024-36039_PoC

CVE-2024-36039: PoC de Inyección de Objetos a Inyección SQL en PyMySQL Un laboratorio de Prueba de Concepto PoC completo y reproducible para CVE-2024-36039 , que demuestra cómo una vulnerabilidad de Inyección de Objetos en PyMySQL versiones = 1.1.0 puede escalarse a una Inyección SQL completa...

EUVD-2026-75014

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-79964

Dell Secure Connect Gateway (SCG) 5.0 Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ) contain an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could exploit this flaw to launch ...

ace-vim-neovim

ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen root@kitploit: nc -vlp 9999 2. ace root@kitploit: vim pocshell.txt And then, your localhost will get shell...

EEF-CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

Summary Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

PT-2026-86964

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage rules allows a malicious package publisher to inject terminal control sequences into the output of mix usage rules.search docs. mix usage rules.search docs searches Hex documentation through...

CVE-2026-82584

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's hex...

CVE-2026-82584 Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's hex...

Security update for broot (moderate)

openSUSE security update: security update for broot ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21675-1 Rating: moderate References: bsc1275994 Cross-References: CVE-2026-72847 CVSS scores: CVE-2026-72847 SUSE : 4.6...

CVE-2026-81695 openssl_encrypt before 1.4.9 Terminal Injection via key_id

opensslencrypt versions before 1.4.9 fail to escape attacker-controlled keyid values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious keyid containing escape sequences to repaint terminal output and forge authenticity verification blocks...

CVE-2026-81696 openssl_encrypt before 1.4.9 Terminal Injection via info Command

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

CVE-2026-81696

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata output by the info command. An attacker can craft malicious files containing escape sequences that repaint terminal output and forge verification information displayed to users. The fix is availabl...

CVE-2026-81696 openssl_encrypt before 1.4.9 Terminal Injection via info Command

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

CVE-2026-81695

openssl_encrypt versions before 1.4.9 are affected by a terminal injection vulnerability. During decrypt auto-detection, attacker-controlled key_id values are printed to stderr without proper escaping, allowing an attacker to craft encrypted files containing escape sequences that repaint terminal...

EUVD-2026-67052

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

Astra Linux – Vulnerability in Tomcat9

Improper neutralization of escape, meta, or control sequence vulnerabilities in Apache Tomcat. For a subset of uncommon rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, thos...