CVE-2017-4490-

CVE-2017-4490 저는 실험을 진행했으며 .bashrc 파일을 악용하는 데 성공했습니다. 터미널에 특수 효과를 작성하고 꾸미는 전문가로서 .bashrc 파일에 취약점을 만들었고, 터미널을 방해하는 데 성공했습니다. 이 취약점은 figlet이 모든 시스템에서 작동하기 때문에 모든 Linux 시스템에서 존재합니다. apt-get install figlet 명령어만 입력하면 Home 또는 root에 .bashrc가 생성됩니다. .bashrc 파일을 삭제하는 데 권한이 필요하지 않습니다. 그리고 변조된 .bashrc를 추가하여...

Malicious code in rich-figlet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b97458c87c8580a9cb2f2edc0af2ae40a36489dafa860102eee0307256cb416b Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...

MAL-2025-5130 Malicious code in rich-figlet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b97458c87c8580a9cb2f2edc0af2ae40a36489dafa860102eee0307256cb416b Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...

Fedora: Security Advisory for golang-github-mbndr-figlet4go (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-mbndr-figlet4go-0-0.8.20191009gitd6cef5b.fc36

figlet4go is a go library which is a port of FIGlet to Golang. With figlet4go it's easy to create ascii text banners in the command-line or with the given api...

SUSE SLED12 / SLES12 Security Update : Xen (SUSE-SU-2015:0613-1)

The XEN hypervisor received updates to fix various security issues and bugs. The following security issues were fixed : - CVE-2015-2151: XSA-123: A hypervisor memory corruption due to x86 emulator flaw. - CVE-2015-2045: XSA-122: Information leak through version information hypercall. -...

openSUSE Security Update : xen (openSUSE-2015-129)

The XEN virtualization was updated to fix bugs and security issues : Security issues fixed: CVE-2015-0361: XSA-116: xen: xen crash due to use after free on hvm guest teardown CVE-2014-9065, CVE-2014-9066: XSA-114: xen: p2m lock starvation CVE-2014-9030: XSA-113: Guest effectable page reference le...

pam_captcha username harvest vulnerability

pamcaptcha is visual text-based CAPTCHA challenge module for PAM that uses figlet to generate the CAPTCHAs. Project site: http://www.semicomplete.com/projects/pamcaptcha/ A site with a screen shot: http://www.michaelboman.org/how-to/securing-ssh-access-with-pam-captcha I found a security problem...