Lucene search
+L

130 matches found

Kitploit
Kitploit
•added 2026/10/06 1:22 p.m.•24 views

TrueCalle-Bot

TrueCalle-Bot TrueCaller Python 봇 - 전화번호 검색 및 터미널에 결과 출력 hossamsalem23 제작 첫 번째 : Chrome Webdriver 다운로드 https://chromedriver.chromium.org/downloads 설치 git clone https://github.com/hossamsalem23/TrueCalle-Bot cd TrueCalle-Bot/ sudo apt install python3 sudo apt install python3-pip pip3 install...

6.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•8 views

Rocky Linux 9 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc Multiple Vulnerabilities (crlsa-2023_6518)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20236518 advisory. flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console CVE-2023-28100 flatpak: Metadata with ANSI control codes can cause...

10CVSS5.9AI score0.00879EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2026/09/28 4:01 a.m.•12 views

CVE-2026-100866

A flaw was found in onefetch. An attacker can manipulate terminal output by embedding control characters and escape sequences into project manifest fields, such as the project name or version. When a user runs onefetch in an untrusted repository, these unsanitized values are printed directly to t...

4.8CVSS5.8AI score0.00128EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/27 1:16 p.m.•11 views

CVE-2026-100867

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof...

4.8CVSS0.00119EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/27 1:09 p.m.•8 views

EUVD-2026-87939

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof...

4.8CVSS5.9AI score0.00119EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/27 1:09 p.m.•21 views

CVE-2026-100867

Versions of spaceship-prompt up to and including 4.22.5 are vulnerable to Terminal Escape Sequence Injection . The software fails to sanitize control characters within project manifest version fields before rendering them in the zsh prompt . An attacker can embed ANSI/OSC escape sequences in thes...

4.8CVSS5.9AI score0.00119EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/27 1:09 p.m.•43 views

CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

4.8CVSS0.00128EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/27 1:09 p.m.•12 views

EUVD-2026-87938

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

4.8CVSS5.9AI score0.00128EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/27 1:09 p.m.•37 views

CVE-2026-100867 spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof...

4.8CVSS0.00119EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/27 1:09 p.m.•25 views

CVE-2026-100866

Versions of onefetch through 2.28.1 are vulnerable to terminal escape sequence injection . The root cause is that the application writes repository information field values to the terminal without removing control characters. Attackers can embed ANSI/OSC escape sequences in project manifest versi...

4.8CVSS5.9AI score0.00128EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•10 views

CVE-2026-100867: Improper Neutralization of Escape, Meta, or Control Sequences

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof...

4.8CVSS5.9AI score0.00119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•6 views

CVE-2026-100866: Improper Neutralization of Escape, Meta, or Control Sequences

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

4.8CVSS5.9AI score0.00128EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/08 12:23 a.m.•16 views

EUVD-2026-72589

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS5.9AI score0.00664EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/02 2:12 p.m.•9 views

OPENSUSE-SU-2026:21741-1 Security update for python-ruff

This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged bsc1249011...

2.3CVSS5.7AI score0.00325EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/27 5:20 p.m.•13 views

PYSEC-2026-3774

opensslencrypt versions before 1.4.9 fail to escape attacker-controlled keyid values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious keyid containing escape sequences to repaint terminal output and forge authenticity verification blocks...

9.3CVSS5.8AI score0.0025EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/08/27 2:51 p.m.•16 views

EUVD-2026-67063

opensslencrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows o...

9.8CVSS5.2AI score0.00587EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•3 views

CVE-2026-81696: Improper Output Neutralization for Logs

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

9.3CVSS5.8AI score0.0025EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•4 views

CVE-2026-81695: Improper Output Neutralization for Logs

opensslencrypt versions before 1.4.9 fail to escape attacker-controlled keyid values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious keyid containing escape sequences to repaint terminal output and forge authenticity verification blocks...

9.3CVSS5.8AI score0.0025EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•25 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: tmux (UTSA-2024-005632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005632 advisory. In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack- based buffer-overflow that can be exploited by terminal output...

8.8CVSS7.1AI score0.00693EPSS
SaveExploits1References4
CVE
CVE
•added 2026/08/17 8:36 p.m.•26 views

CVE-2026-75483

powerlevel10k fails to sanitize control characters in the package.json version field when rendering the package prompt segment, allowing an attacker to embed raw escape bytes that emit arbitrary terminal control sequences on each prompt render when a user enters a compromised directory. CVSS 3.1 ...

4.8CVSS6AI score0.00171EPSS
SaveExploits0References5
Rows per page
Query Builder