CVE-2015-2846

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

Design/Logic Flaw

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

CVE-2015-2846

CVE-2015-2846 affects BitTorrent Sync (BTSync.exe) where the BTSync protocol handler fails to properly validate btsync: URLs, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file/link) and results in arbitrary command executio...

CVE-2015-2846

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

CVE-2015-2846: Improper Neutralization of Special Elements used in a Command

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

BitTorrent Sync BTSync.exe Arbitrary Code Execution Vulnerability

BitTorrent Sync is a set of data synchronization tools developed by the American company BitTorrent. The tool synchronizes files between different devices over LANs and the Internet using secure, distributed P2P technology. An arbitrary code execution vulnerability exists in BitTorrent Sync's...

BitTorrent Sync （peer-to-peer file synchronization system on there is a high risk of command injection vulnerability-vulnerability warning-the black bar safety net

According to HP 0day plans ZDI in last week's announcement that BitTorrent Sync on the presence of a high-risk vulnerability, an attacker can remotely execute arbitrary code. The black bar safety net science BitTorrent Sync is BitTorrent network technology company launched in multiple computers f...

PT-2015-5931

Name of the Vulnerable Software and Affected Versions BitTorrent Sync affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via a crafted btsync: link. This is a result of a command injection vulnerability in the btsync: protocol...

BitTorrent Sync btsync: Protocol Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent Sync. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how BitTorrent Sync...

BEWARE! μTorrent Silently Installing Bitcoin Mining Software

If you have recently installed or updated the popular BitTorrent client μTorrent 3.4.2 Build 28913 on your computer, then you read this warning post right now. Users of the μTorrent file-sharing service are complaining that the latest update of software used for torrent downloading is silently...

Tribler - Download Torrents using Tor-inspired onion routing

Tribler is a research project of Delft University of Technology. Tribler was created over nine years ago as a new open source Peer-to-Peer file sharing program. During this time over one million users have installed it successfully and three generations of Ph.D. students tested their algorithms i...

BitTorrent Invites Sony to Release 'The Interview' Movie On Its Paid Service

Sony was forced to pull the cinema release of "The Interview," scheduled for Christmas day, after hacker group Guardians of Peace GOP threatened to attack any theater that decided to show the film. But the studio will release the controversial North Korean-baiting film via different alternatives...

CVE-2014-8515

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

Design/Logic Flaw

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

CVE-2014-8515

The CVE affects BitTorrent’s web interface. The vulnerability is a remote code execution flaw in the web interface bound to port 10000, exploitable by supplying crafted requests using knowledge of the pairing values to execute arbitrary commands in the context of the vulnerable process. Multiple ...

CVE-2014-8515

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

CVE-2014-8515: Improper Neutralization of Special Elements used in a Command

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

BitTorrent Web Interface Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the web interface boun...

BitTorrent Web Interface Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the web interface boun...

PT-2014-8578

Name of the Vulnerable Software and Affected Versions BitTorrent affected versions not specified Description The issue allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and sending a crafted request to port 10000. This is related to the web...