EUVD-2018-0164

Malware in sbrugna...

Command injection

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

CVE-2014-5000

The CVE-2014-5000 issue affects the lawn-login Ruby gem (version 0.0.7), where the login function in lib/lawn.rb places credentials on the curl command line. This exposes sensitive information to local users who can enumerate the process list, enabling local plaintext password disclosure. The roo...