28 matches found
CVE-2024-55503
CVE-2024-55503 Termius 앱 MacOS dylib 명령 주입 설명 v.9.9.0 이전의 termius에서 문제가 발견되어 로컬 공격자가 DYLDINSERTLIBRARIES 구성 요소에 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. dylib를 사용합니다. DYLDINSERTLIBRARIES=exploitcombined.dylib /Applications/Termius.app/Contents/MacOS/Termius 재현 영향 명령 실행 로컬 참조 CVE 기록:...
CVE-2026-Termius
Termius macOS 애플리케이션 취약점 보고서 CVE-2026-Termius 대상 : Termius macOS 테스트 버전 : 최신 2026년 1월 기준 영향 : 원격 코드 실행 RCE, 로컬 권한 상승 LPE, 앱 보안 우회 🚨 실행 요약 Termius macOS 애플리케이션에서 공격자가 다음을 수행할 수 있게 하는 세 가지 심각한 취약점이 발견되었습니다: 1. 임의 시스템 명령 실행 RCE : 렌더러에 노출된 숨겨진 백도어 Symbol을 통해. 2. 저장된 모든 비밀번호 덤프 LPE : 노출된 keytar 네이티브 모...
📄 Termius 9.9.0 Remote Code Execution
This Metasploit module demonstrates a remote code execution vulnerability in the Termius Electron application caused by an exposed symbol in the global JavaScript Symbol Registry. By accessing a shared Symbol.for key that unintentionally references preloaded Node.js modules, attacker-controlled...
EUVD-2025-6766
Malicious code in bioql PyPI...
EUVD-2024-52779
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-55503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. CVE-2024-55503...
New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App
Cybersecurity researchers have discovered new artifacts associated with an Apple macOS malware called ZuRu, which is known to propagate via trojanized versions of legitimate software. SentinelOne, in a new report shared with The Hacker News, said the malware has been observed masquerading as the...
CVE-2024-55503
An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component...
CVE-2024-57061
An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...
CVE-2024-57061
An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...
CVE-2024-57061
An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...
Termius 安全漏洞
Termius is an SSH client from Termius, Inc. A security vulnerability exists in Termius versions 9.9.0 through 9.16.0, which stems from an insecure Electron Fuses configuration that could allow a physically proximate attacker to execute arbitrary code...
CVE-2024-57061
An issue in Termius versions 9.9.0 through 9.16.0 allows a physically proximate attacker to execute arbitrary code due to an insecure Electron Fuses configuration . While the vulnerability is classified as CRITICAL with a CVSS 3.1 score of 9.8 , it requires physical proximity for exploitation. Us...
CVE-2024-57061
An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...
CVE-2024-57061: Improper Control of Generation of Code
An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...
Termius Installed (macOS)
Binary data macostermiusinstalled.nbin...
Termius Installed (Linux)
Binary data termiusnixinstalled.nbin...
Termius Installed (Windows)
Binary data termiuswininstalled.nbin...