10 matches found
Bastillion
Bastillion 一款现代化的、基于 Web 的 SSH 控制台和 SSH 密钥管理工具。 Bastillion 为你提供了一种简洁的、基于浏览器的方式来管理所有系统上的 SSH 访问——就像一个带有友好仪表盘的堡垒机。它做两件事： 1. 基于 Web 的 SSH 终端 ——主机注册后，授权用户可以直接从浏览器打开一个或多个实时终端会话，命令可以选择性地同时广播到所有打开的会话（可以想象成 tmux 的同步窗格，只不过面对的是远程主机集群，而不是本地窗格）。 2. SSH 密钥管理 ——Bastillion 持有自己的 SSH...
CVE-2024-41666
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. Starting in version 2.6.0, when the administrator enables this function and grants permission to...
CVE-2024-41666 The Argo CD web terminal session does not handle the revocation of user permissions properly.
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. Starting in version 2.6.0, when the administrator enables this function and grants permission to...
CVE-2024-41666: Improper Privilege Management
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. Starting in version 2.6.0, when the administrator enables this function and grants permission to...
openITCOCKPIT Command Execution Vulnerability
It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. A security vulnerability exists in the Web-based terminal in It-novum openITCOCKPIT versions prior to 3.7.3. An attacker can exploit this vulnerability to execute arbitrary operating system commands wi...
Design/Logic Flaw
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
CVE-2020-10789
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
CVE-2020-10789: Improper Neutralization of Special Elements used in an OS Command
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
Fedora Update for Ajaxterm FEDORA-2010-18867
Check for the Version of Ajaxterm OpenVAS Vulnerability Test Fedora Update for Ajaxterm FEDORA-2010-18867 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
