5260 matches found
rubygems: Escape sequence in the "summary" field of gemspec
A vulnerability was found where rubygems did not properly sanitize gems' specification text. A specially crafted gem could interact with the terminal via the use of escape sequences...
ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick
It was found that WEBrick did not sanitize all its log messages. If logs were printed in a terminal, an attacker could interact with the terminal via the use of escape sequences...
[ASA-201803-2] mkinitcpio-busybox: arbitrary code execution
Arch Linux Security Advisory ASA-201803-2 ========================================= Severity: High Date : 2018-03-01 CVE-ID : CVE-2017-16544 Package : mkinitcpio-busybox Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-514 Summary ======= The package...
[ASA-201803-1] busybox: arbitrary code execution
Arch Linux Security Advisory ASA-201803-1 ========================================= Severity: High Date : 2018-03-01 CVE-ID : CVE-2017-16544 Package : busybox Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-512 Summary ======= The package busybox before versi...
rubygems: Escape sequence in the "summary" field of gemspec
A vulnerability was found where rubygems did not properly sanitize gems' specification text. A specially crafted gem could interact with the terminal via the use of escape sequences...
ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick
It was found that WEBrick did not sanitize all its log messages. If logs were printed in a terminal, an attacker could interact with the terminal via the use of escape sequences...
Debian DLA-1289-1 : irssi security update
It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client : - CVE-2018-7050: NULL pointer dereference for an 'empty' nick. - CVE-2018-7051: Certain nick names could result in out-of-bounds access when printing theme strings. - CVE-2018-7052: When the...
DEBIAN-CVE-2018-6954
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. Th...
UBUNTU-CVE-2018-6954
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. Th...
CVE-2018-1000021
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, or have their traffic modified in a...
CVE-2018-1000021
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, or have their traffic modified in a...
DEBIAN-CVE-2018-1000021
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, or have their traffic modified in a...
PT-2018-9212 · Git +2 · Git +2
Name of the Vulnerable Software and Affected Versions: git versions 2.15.1 and earlier Description: The issue is related to an Input Validation Error in the Client component, which can lead to problems including messing up terminal configuration and potentially allowing Remote Code Execution RCE...
Would You Have Spotted This Skimmer?
When you realize how easy it is for thieves to compromise an ATM or credit card terminal with skimming devices, it's difficult not to inspect or even pull on these machines when you're forced to use them personally -- half expecting something will come detached. For those unfamiliar with the...
CVE-2018-1000021
It was found that the Git client printed server-sent ANSI escape codes to the terminal without any sanitization, leading to execution of arbitrary escape sequences in the terminal emulator. Exploitation of this flaw by a MitM attacker could potentially result in code execution, arbitrary file...
MGCP protocol out-of-bounds read vulnerability in multiple Huawei products
Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. An out-of-bounds read vulnerability exists in the MGCP protocol of several Huawei products, which is due to the program's failure to adequately verify...
Unauthorized Access Vulnerability in Hikvision's Terminal Feature Control System
Zhejiang Haikang Technology Co., Ltd. specializes in the research, development, design and manufacture of intelligent control technology and is a domestic intelligent control technology/product provider. An unauthorized access vulnerability exists in Hikang Technology Terminal Feature Control...
Enumdb - MySQL and MSSQL Brute Force And Post Exploitation Tool To Search Through Databases And Extract Sensitive Information
Enumdb is brute force and post exploitation tool for MySQL and MSSQL databases. When provided a list of usernames and/or passwords, it will cycle through each looking for valid credentials. By default enumdb will use newly found, or given, credentials to search the database and find tables...
Apache Guacamole terminal emulator buffer overflow vulnerability
Apache Guacamole is a clientless remote desktop gateway from the Apache Software Foundation that supports standard protocols such as VNC, RDP and SSH. terminal emulator is one of the terminal emulators. A buffer overflow vulnerability exists in Apache Guacamole terminal emulator versions 0.9.5...
