139 matches found
EUVD-2023-2400
Malicious code in bioql PyPI...
CVE-2023-43616 vulnerabilities
Vulnerabilities for packages: croc...
GHSA-8C8W-F7WP-2JR2 vulnerabilities
Vulnerabilities for packages: croc...
CVE-2023-43616 vulnerabilities
Vulnerabilities for packages: croc...
GHSA-8C8W-F7WP-2JR2 vulnerabilities
Vulnerabilities for packages: croc...
Fedora: Security Advisory (FEDORA-2023-4c1050f439)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GO-2023-2073 Croc sender may send dangerous new files to receiver in github.com/schollz/croc
Croc sender may send dangerous new files to receiver in github.com/schollz/croc...
GO-2023-2070 Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc...
GO-2023-2069 Croc may expose secret to local users in github.com/schollz/croc
Croc may expose secret to local users in github.com/schollz/croc...
GO-2023-2071 Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc...
GO-2023-2068 Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: wave-fips, rclone, kafkaexporter, conftest-fips, eck-operator, go, hey, prometheus-adapter-fips, newrelic-prometheus-configurator, cass-operator-fips-no-pvc-delete, prometheus-mongodb-exporter, cass-operator-fips, trillian-fips, dockerize, jitsucom-bulker,...
Fedora 39 : golang-github-schollz-croc (2023-4c1050f439)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4c1050f439 advisory. Automatic update for golang-github-schollz-croc-9.6.4-1.fc39. Changelog Fri May 19 2023 Mikel Olasagasti Uranga - 9.6.4-1 - Update to 9.6.4 - Closes...
Sensitive Information Exposure
github.com/schollz/croc is vulnerable to Sensitive Information Exposure. The vulnerability is due to the way croc uses the leading three characters of a shared secret to select a common "room name". When custom shared secrets are used, the leading three characters might give away information abou...
Improper Neutralization Of Filename Or Path
github.com/schollz/croc is vulnerable to Improper Neutralization Of Filename Or Path. The vulnerability is due to a lack of filenames filtering or received from the client side. This allows an attacker to use filenames with special characters, including ANSI/CSI terminal escape sequences. The...
Arbitrary File Overwrite
github.com/schollz/croc is vulnerable to Arbitrary File Overwrite. The vulnerability is due to the Croc protocol allowing a sender to specify an arbitrary path for the file transfer, which lacks validation to check if the file path will overwrite an existing file on the client side. An attacker c...
Arbitrary File Write
github.com/schollz/croc is vulnerable to Arbitrary File Write through crafted File Paths. The vulnerability is due to the Croc protocol which allows senders to specify sn arbitrary path for a file transfer. If the recipient doesn't already have a file with the same name, an attacker can exploit...
SUSE CVE-2023-43617
An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...