Fedora: Security Advisory for qbittorrent (FEDORA-2023-185f3e8ad7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: qbittorrent-4.6.1-1.fc38

A Bittorrent client using rblibtorrent and a Qt6 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...

[SECURITY] Fedora 39 Update: qbittorrent-4.6.1-1.fc39

A Bittorrent client using rblibtorrent and a Qt6 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...

Debian: Security Advisory (DLA-312-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2005-1470

Multiple unknown vulnerabilities in the 1 TZSP, 2 MGCP, 3 ISUP, 4 SMB, or 5 Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service segmentation fault via unknown vectors...

SUSE CVE-2007-2274

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service CPU consumption and application crash via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain...

SUSE CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

SUSE CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_bittorrent

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6336634658619392 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60600068fe7d Cras...

Bitstorm SQL注入漏洞

Bitstorm is a lightweight Bittorrent tracker by the individual developer Anthony Ananich. Bitstorm suffers from a SQL injection vulnerability that stems from a misuse of the parameter event resulting in sql injection...

Deluge: Cross-Site Scripting

Background Deluge is a BitTorrent client. Description Deluge does not sufficiently sanitize crafted torrent file data, leading to the application interpreting untrusted data as HTML. Impact An attacker can achieve XSS via a crafted torrent file. Workaround There is no known workaround at this tim...

GLSA-202210-04 : Wireshark: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-04 Wireshark: Multiple Vulnerabilities - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file CVE-2021-22235 - NULL pointer exception i...

Mirai Botnet Hits Wynncraft Minecraft Server with 2.5 Tbps DDoS Attack

Web infrastructure and security company Cloudflare disclosed this week that it halted a 2.5 Tbps distributed denial-of-service DDoS attack launched by a Mirai botnet. Characterizing it as a "multi-vector attack consisting of UDP and TCP floods," researcher Omer Yoachimik said the DDoS attack...

BitTorrent Protocol

BitTorrent is a communication protocol for peer-to-peer file sharing P2P, which enables users to distribute data and electronic files over the Internet in a decentralized manner. This protection can be used to detect the BitTorrent Protocol handshake, and with the packet capture, allows to extrac...

BitTorrent uTorrent 缓冲区错误漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by BitTorrent Inc. in the United States. A security vulnerability exists in BitTorrent uTorrent, which can be exploited by an attacker to remotely launch an attack, due to a memory corruption caused by certain malicious...

BitTorrent uTorrent 授权问题漏洞

BitTorrent uTorrent is a set of BitTorrent client software written in C++ by BitTorrent Inc. in the United States. A security vulnerability exists in BitTorrent uTorrent, which originates from a weak authentication vulnerability due to operation with unknown input, which can be exploited by...

BitTorrent uTorrent 安全漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. BitTorrent uTorrent suffers from a security vulnerability that stems from certain unknown handling of component guest accounts. A remote attacker could exploit the vulnerability to caus...

BitTorrent uTorrent 安全漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. A security vulnerability exists in BitTorrent uTorrent that stems from some unknown functionality of the component JSON RPC server. A remote attacker could exploit the vulnerability to...

BitTorrent uTorrent 安全漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. A security vulnerability exists in BitTorrent uTorrent that stems from some unknown functionality of the component JSON RPC server. A remote attacker could exploit the vulnerability to...

Popcorn Time Cross-Site Scripting Vulnerability

Popcorn Time is a multi-platform BitTorrent client. version 0.4.7 of Popcorn Time is vulnerable to a cross-site scripting vulnerability that originates in the setting page Movies API Servers field's lack of data validation filtering for user-supplied data and output. An attacker could exploit the...