14880 matches found
Denial of service
Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket...
Race condition
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...
Race condition
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...
CVE-2022-24951
The CVE-2022-24951 issue affects EternalTerminal prior to 6.2.0 and is described as a race condition that allows a local attacker to hijack Eternal Terminal’s IPC socket, enabling access to Eternal Terminal clients that attempt to connect in the future. Public advisories and vendor/OpenSUSE OSV e...
CVE-2022-24951
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...
Eternal Terminal 竞争条件问题漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal versions prior to 6.2.0, which stems from a vulnerability that allows a local attacker to hijack Eternal Terminal's IPC sockets to gain access to Eternal Terminal clients that...
CVE-2022-24951
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...
PT-2022-15199 · Canna +2 · Canna +2
Name of the Vulnerable Software and Affected Versions: canna versions prior to canna-3.7p3-bp153.2.3.1 canna versions prior to 3.7p3-bp154.3.3.1 Description: An Improper Access Control issue in the systemd service of canna in openSUSE Backports SLE-15-SP3 and openSUSE Backports SLE-15-SP4 allows...
Security update for canna (important)
openSUSE Security Update: Security update for canna Announcement ID: openSUSE-SU-2022:10091-1 Rating: important References: 1199280 Cross-References: CVE-2022-21950 CVSS scores: CVE-2022-21950 SUSE: 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP4 ...
CVE-2022-24952
Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket...
Eternal Terminal 竞争条件问题漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal versions prior to 6.2.0 that originated from allowing an authenticated attacker to hijack another user's SSH authorization socket, allowing the attacker to log in to another...
Eternal Terminal 安全漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal versions prior to 6.2.0, which stems from a combination of a race condition, buffer overflow, and logic error in PipeSocketHandler::listen...
The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Security Bulletin: Vulnerability in the Node.js got module affects IBM Event Streams (CVE-2022-33987)
Summary This security vulnerability affects the Node.js got module that is used by IBM Event Streams. Vulnerability Details CVEID:CVE-2022-33987 DESCRIPTION: Node.js got module could allow a remote attacker to bypass security restrictions, caused by an unspecified. By sending a specially-crafted...
CVE-2022-35794
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-35766
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-35767
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...