1658 matches found
Nextcloud Desktop Client: User-assisted execution of arbitrary code
Background The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. Description It was discovered that Nextcloud Desktop Client did not validate URLs. Impact A remote attacker could entice a user to connect to a malicious Nextcloud server to cause the...
GNU Screen: User-assisted execution of arbitrary code
Background GNU Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells. Description It was discovered that GNU screen did not properly handle certain UTF-8 character sequences. Impact A remote attacker could entice a user...
GLSA-202104-01 : Git: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202104-01 Git: User-assisted execution of arbitrary code It was discovered that Git could be fooled into running remote code during a clone on case-insensitive file systems with support for symbolic links, if Git is configured...
GLSA-202012-12 : libass: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202012-12 libass: User-assisted execution of arbitrary code It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files. Impact : A remote attacker could entice a user to...
OS Command Injection
newsbeuter is vulnerable to OS Command Injection. Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a...
GLSA-202003-59 : libvpx: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202003-59 libvpx: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...
GLSA-202003-58 : UnZip: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202003-58 UnZip: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...
GLSA-202003-23 : libjpeg-turbo: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202003-23 libjpeg-turbo: User-assisted execution of arbitrary code It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. Impact : A remote attacker could entice a user to open a specially crafted JPEG file ...
CVE-2013-5582
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AAv3.2.exe file...
CVE-2012-4980
Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...
Stack overflow
Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...
CVE-2012-4980
Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...
GLSA-201911-02 : pump: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201911-02 pump: User-assisted execution of arbitrary code It was discovered that there was an arbitrary code execution vulnerability in the pump DHCP/BOOTP client. Impact : A remote attacker, by enticing a user to connect to a...
CVE-2008-1467
CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to "received URLs in the message window." NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by t...
CVE-2007-4400
CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
KDE KConfig: User-assisted execution of arbitrary code
Background Provides an advanced configuration system. Description A vulnerability was discovered in KDE KConfig’s handling of .desktop and .directory files. Impact An attacker could entice a user to execute a specially crafted .desktop or .directory file possibly resulting in execution of arbitra...
MacOS Zero Day Allows Trusted Apps to Run Malicious Code
A researcher has revealed a zero-day flaw in Apple’s Mojave operating system tied to the way the OS verifies apps. The bug allows attackers to sneak past macOS security measures and run whitelisted apps that have been manipulated to run malicious code. macOS researcher Patrick Wardle revealed the...
Zsh: User-assisted execution of arbitrary code
Background A shell designed for interactive use, although it is also a powerful scripting language. Description Two input validation errors have been discovered in how Zsh parses scripts: Parsing a malformed shebang line could cause Zsh to call a program listed in the second line CVE-2018-0502...
GHSA-G68X-VVQQ-PVW3 Ckeditor XSS Vulnerability
CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste. It was possible to execute XSS inside the CKEditor source area after persuading the victim to: i switch CKEditor to source mode, then ii paste a specially crafted HTML code, prepared by the attacker, into the opene...
