https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:21:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233368 EUVD-2026-233368 https://cve.radiocsirt.org/vuln/euvd-2026-233368 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23465 <p>SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commit a94e6b24d24ce9680ad79884992e1dff8e150a31, an attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user&#39;s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Version a94e6b24d24ce9680ad79884992e1dff8e150a31 contains a patch for this issue. There are no known workarounds available.</p> <p>SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commit a94e6b24d24ce9680ad79884992e1dff8e150a31, an attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user&#39;s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Version a94e6b24d24ce9680ad79884992e1dff8e150a31 contains a patch for this issue. There are no known workarounds available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23465 https://cve.radiocsirt.org/vuln/ghsa-jq43-q8mx-r7mq <p><strong>Affected:</strong> SwiftURL: github.com/migueldeicaza/SwiftTerm</p> <p>### Impact</p> <p>Attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user&#39;s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.</p> <p>### Credit These bugs were found and disclosed by David Leadbeater &lt;dgl@dgl.cx&gt; (@dgl at Github.com)</p> <p>### Patches</p> <p>Fixed in version ce596e0dc8cdb288bc7ed5c6a59011ee3a8dc171</p> <p>### Workarounds</p> <p>There are no workarounds available</p> <p>### References</p> <p>Similar exploits to this existed in the past, for terminal emulators:</p> <p>https://nvd.nist.gov/vuln/detail/CVE-2003-0063 https://nvd.nist.gov/vuln/detail/CVE-2008-2383</p> <p>Additional background and information is also available:</p> <p>https://marc.info/?l=bugtraq&amp;m=104612710031920&amp;w=2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030</p> <p><strong>Affected:</strong> SwiftURL: github.com/migueldeicaza/SwiftTerm</p> <p>### Impact</p> <p>Attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user&#39;s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.</p> <p>### Credit These bugs were found and disclosed by David Leadbeater &lt;dgl@dgl.cx&gt; (@dgl at Github.com)</p> <p>### Patches</p> <p>Fixed in version ce596e0dc8cdb288bc7ed5c6a59011ee3a8dc171</p> <p>### Workarounds</p> <p>There are no workarounds available</p> <p>### References</p> <p>Similar exploits to this existed in the past, for terminal emulators:</p> <p>https://nvd.nist.gov/vuln/detail/CVE-2003-0063 https://nvd.nist.gov/vuln/detail/CVE-2008-2383</p> <p>Additional background and information is also available:</p> <p>https://marc.info/?l=bugtraq&amp;m=104612710031920&amp;w=2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030</p> https://cve.radiocsirt.org/vuln/ghsa-jq43-q8mx-r7mq https://cve.radiocsirt.org/vuln/gsd-2022-23465 gsd-2022-23465 https://cve.radiocsirt.org/vuln/gsd-2022-23465