538 matches found
PT-2026-53854
Name of the Vulnerable Software and Affected Versions Net::BitTorrent versions prior to 2.0.2 Description An issue exists where files can be written outside the designated download directory due to path traversal in peer-supplied metadata. While file path components are validated during...
CVE-2026-57081: Uncontrolled Recursion
Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...
CVE-2026-57080: Allocation of Resources Without Limits or Throttling
Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix. The peer-wire framing in processmessages trusts the 4-byte length prefix sent by a connected peer with no upper bound, while receivedata appends every inbound byte to th...
CVE-2026-57079: Improper Limitation of a Pathname to a Restricted Directory
Net::BitTorrent versions through 2.0.1 for Perl write files outside the download directory via path traversal in peer-supplied metadata. Net::BitTorrent validates file path components only on the .torrent-file ingest path. The peer and magnet metadata path onmetadatareceived, reached from the BEP...
PT-2026-53856
Name of the Vulnerable Software and Affected Versions Net::BitTorrent versions prior to 2.0.2 Description Remote memory exhaustion is possible through the processing of deeply nested bencoded input. The bdecode function recurses for each nested list or dictionary level without a depth limit. Duri...
PT-2026-53855
Name of the Vulnerable Software and Affected Versions Net::BitTorrent versions prior to 2.0.2 Description Remote memory exhaustion is possible due to an uncapped peer-wire message-length prefix. The peer-wire framing in the process messages function trusts the 4-byte length prefix sent by a...
CVE-2026-57082: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Net::BitTorrent versions through 2.0.1 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG. The MSE Message Stream Encryption handshake derives its 160-bit Diffie-Hellman private key from Perl's rand, a non-cryptographic drand48-class generator seeded once per...
[SECURITY] Fedora 44 Update: transmission-4.1.2-1.fc44
Transmission is a free, lightweight BitTorrent client. It features a simple, intuitive interface on top on an efficient, cross-platform back-end...
[SECURITY] Fedora 43 Update: transmission-4.1.2-1.fc43
Transmission is a free, lightweight BitTorrent client. It features a simple, intuitive interface on top on an efficient, cross-platform back-end...
The vulnerability of the dissect_bencoded_list() function in the BT-DHT protocol analyzer of Wireshark allows a hacker to cause a service failure.
The vulnerability of the dissectbencodedlist function in the BT-DHT protocol analyzer of Wireshark, a computer network traffic analyzer, is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2008-7166
Buffer overflow in the web interface in BitTorrent 6.0.1 build 7859 and earlier, and uTorrent 1.7.6 build 7859 and earlier, allows remote attackers to cause a denial of service memory consumption and crash via a crafted Range header. NOTE: this is probably a different vulnerability than...
Hacktivists claim near-total Spotify music scrape
Hacktivist group Anna’s Archive claims to have scraped almost all of Spotify’s catalog and is now seeding it via BitTorrent, effectively turning a streaming platform into a roughly 300 TB pirate “preservation archive.” On its blog, the group states: “A while ago, we discovered a way to scrape...
EUVD-2007-2269
Malware in sbrugna...
EUVD-2008-0374
Malware in sbrugna...
EUVD-2007-3913
Malware in sbrugna...
EUVD-2006-3227
Malware in sbrugna...
EUVD-2014-8352
Malware in sbrugna...
EUVD-2014-8346
Malware in sbrugna...