21 matches found
GO-2023-2070 Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc...
GO-2023-2069 Croc may expose secret to local users in github.com/schollz/croc
Croc may expose secret to local users in github.com/schollz/croc...
Improper Neutralization Of Filename Or Path
github.com/schollz/croc is vulnerable to Improper Neutralization Of Filename Or Path. The vulnerability is due to a lack of filenames filtering or received from the client side. This allows an attacker to use filenames with special characters, including ANSI/CSI terminal escape sequences. The...
GHSA-7MP6-929P-PQHJ vulnerabilities
Vulnerabilities for packages: croc...
GHSA-7G3V-4GGR-XVJF vulnerabilities
Vulnerabilities for packages: croc...
Sender can cause a receiver to overwrite files during ZIP extraction in Croc
An issue was discovered in Croc before 9.6.16. A sender can cause a receiver to overwrite files during ZIP extraction...
GHSA-PPJH-XP5V-46WC vulnerabilities
Vulnerabilities for packages: croc...
GHSA-HP56-XVF4-G6WR vulnerabilities
Vulnerabilities for packages: croc...
CVE-2023-43618 vulnerabilities
Vulnerabilities for packages: croc...
CVE-2023-43621 vulnerabilities
Vulnerabilities for packages: croc...
CVE-2023-43621
An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...
CVE-2023-43617 vulnerabilities
Vulnerabilities for packages: croc...
CVE-2023-43620 vulnerabilities
Vulnerabilities for packages: croc...
CVE-2023-43616
An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction...
CVE-2023-43616
An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction...
CVE-2023-43619
An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...
CVE-2023-43619 vulnerabilities
Vulnerabilities for packages: croc...
Design/Logic Flaw
An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...
CVE-2023-43619
An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...
CVE-2023-43616
An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction...