145 matches found
CVE-2023-43620
An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...
CVE-2023-43617
An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...
CVE-2023-43616
CVE-2023-43616 affects Croc through version 9.6.5; a sender can cause the receiver to overwrite files during ZIP extraction due to the ZIP extraction handling. Impact is local and relates to file overwrites during extraction. The provided documents do not specify a fixed version or a remediation,...
CVE-2023-43618
CVE-2023-43618 affects Croc (≤9.6.5). The issue is that the protocol requires a sender to provide its local IP addresses in cleartext via an ips? message, exposing internal network identifiers. Several external sources (GHSA-7MP6-929P-PQHJ, OSV entries) corroborate that Croc transmits local IPs i...
CVE-2023-43620: Improper Encoding or Escaping of Output
An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...
CVE-2023-43619
An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...
Croc Security Breach
croc is a tool from the individual developers at Zack that allows any two computers to simply and securely transfer files and folders. A security vulnerability exists in Croc version 9.6.5 and earlier versions, which originates from a sender being able to place an ANSI or CSI escape sequence in a...
CVE-2023-43618: Missing Encryption of Sensitive Data
An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...
CVE-2023-43618
An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...
CVE-2023-43621
An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...
CVE-2023-43617
An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...
CVE-2023-43620
An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...
PT-2023-28879 · Croc · Croc
Name of the Vulnerable Software and Affected Versions: Croc versions through 9.6.5 Description: An issue was discovered in the protocol, which requires a sender to provide its local IP addresses in cleartext via an ips? message. Recommendations: For versions through 9.6.5, consider updating to...
PT-2023-28878 · Croc · Croc
Name of the Vulnerable Software and Affected Versions: Croc versions prior to 9.6.16 Description: An issue was discovered in Croc where parts of a custom shared secret may be divulged to an untrusted Relay when composing a room name. This occurs when a custom shared secret is used. Recommendation...
PT-2023-28877 · Croc · Croc
Name of the Vulnerable Software and Affected Versions: Croc versions through 9.6.5 Description: An issue was discovered in Croc where a sender can cause a receiver to overwrite files during ZIP extraction. Recommendations: For versions through 9.6.5, update to a version newer than 9.6.5 to resolv...
PT-2023-28881 · Croc · Croc
Name of the Vulnerable Software and Affected Versions: Croc versions prior to 9.6.16 Description: An issue was discovered in Croc where a sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver. This allows the sender to potentially exploit the...
PT-2023-28882 · Croc · Croc
Name of the Vulnerable Software and Affected Versions: Croc versions prior to 9.6.16 Description: An issue was discovered in Croc where the shared secret, located on a command line, can be read by local users who list all processes and their arguments. Recommendations: For Croc versions prior to...
WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API
PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...
Fedora: Security Advisory for golang-github-schollz-croc (FEDORA-2023-ac4651c9b2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
