Debian DSA-4819-1 : kitty - security update

Stephane Chauveau discovered that the graphics protocol implementation in Kitty, a GPU-based terminal emulator, did not sanitise a filename when returning an error message, which could result in the execution of arbitrary shell commands when displaying a file with cat. C Tenable Network Security,...

[SECURITY] [DSA 4819-1] kitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4819-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2020 https://www.debian.org/security/faq -...

Remote Code Execution (RCE)

kitty is vulnerable to remote code execution. The vulnerability is possible because filename containing special characters can be included in an error message which allows an attacker to inject malicious code into the system...

CVE-2020-35605

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message...

DEBIAN-CVE-2020-35605

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message...

CVE-2020-35605

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message...

CVE-2020-35605

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message...

UBUNTU-CVE-2020-35605

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message...

CVE-2020-35605

The CVE-2020-35605 vulnerability affects the Kitty terminal emulator (graphics protocol handling) where a filename containing special characters in an error message could enable remote code execution. Affected component is Kitty’s graphics protocol implementation; root cause is inadequate sanitis...

Kovidgoyal Kitty Security Breach

Kovidgoyal Kitty is a Python-based GPU terminal emulation software by the individual developer of Kovidgoyal. The software provides basic terminal functionality and reduces system load based on GPU rendering, using OpenGL for rendering, and can be supported on Linux and Mac. A security...

CVE-2015-7874

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

Buffer overflow

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

CVE-2015-7874

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

CVE-2015-7874

CVE-2015-7874 affects KiTTY Portable 0.65.0.2p and earlier: a buffer overflow in the chat server triggered by a long nickname can allow a remote attacker to execute arbitrary code. NVD CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction, and high imp...

kitty-kats.net XSS vulnerability

Open Bug Bounty ID: OBB-703983 Description| Value ---|--- Affected Website:| kitty-kats.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

A week in security (April 30 – May 6)

Last week on Labs, we examined the Spartacus ransomware, reported about a new tactic used by the Necurs malspam campaign, informed you about the recommended Twitter password change, and discussed engaging students to start considering careers in cybersecurity. Other news NTML credentials can be...

Hello Kitty Database of 3.3 Million Users Surfaces

A cache of data including 3.3 million user credentials belonging to Hello Kitty parent company Sanrio surfaced over the weekend. The breach was originally reported in December 2015, but at the time Sanrio denied any data was stolen as part of the breach. The breach was tied to a misconfigured...

KiTTY Portable <= 0.65.1.1p Local Saved Session Overflow (Egghunter XP, DoS 7/8.1/10)

No description provided by source...

PuTTY and KiTTY Stack Buffer Overflow Vulnerability

PuTTY is a set of free Telnet, Rlogin and SSH client software.KiTTY is one of the version number and can only be used on Windows systems. A stack buffer overflow vulnerability in the handling of SCP-SINK file-size responses by the SCP command-line function in PuTTY and KiTTY could be exploited by...

CVE-2016-2563

Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service stack memory corruption or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP download request...