Tag
Electerm Vulnerable to Remote Code Execution via Malicious Bookmarks (CVE-2026-45058)
2 rules 1 TTPElecterm is vulnerable to remote code execution (CVE-2026-45058) via maliciously crafted bookmark files or compromised sync targets, allowing attackers to inject arbitrary commands when a bookmark is opened or when a sync operation is performed.
Electerm Arbitrary Code Execution via Crafted URI or CLI Arguments
2 rules 1 TTP 1 CVEElecterm versions 3.0.6 through 3.8.14 are vulnerable to arbitrary local code execution via crafted electerm:// URIs or command-line arguments, requiring a user to click a malicious link or open a malicious shortcut file.
Electerm Remote Code Execution Vulnerability via Malicious Filenames
2 rules 1 TTP 1 CVEA remote code execution vulnerability exists in Electerm versions 3.7.8 and earlier, where a malicious SSH server can inject arbitrary commands into a victim's system by crafting filenames with shell metacharacters that are executed when the user attempts to open or edit the file using the 'open with system editor' or 'edit with custom editor' feature.
Electerm Path Traversal Vulnerability Leads to Arbitrary Code Execution
2 rules 2 TTPs 1 CVEElecterm versions prior to 3.7.16 are vulnerable to path traversal, leading to arbitrary code execution through unsanitized widget identifiers.
Electerm Command Injection Vulnerability via runLinux Function
2 rules 1 TTPA command injection vulnerability exists in electerm's install.js due to insufficient validation in the runLinux() function, allowing attackers to execute arbitrary commands by manipulating remote release metadata.