EUVD-2018-0164

Malware in sbrugna...

GHSA-RHGQ-VV9X-J4P5 lawn-login exposes database password to unauthorized users

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

Command injection

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

CVE-2014-5000

The CVE-2014-5000 issue affects the lawn-login Ruby gem (version 0.0.7), where the login function in lib/lawn.rb places credentials on the curl command line. This exposes sensitive information to local users who can enumerate the process list, enabling local plaintext password disclosure. The roo...