EUVD-2017-1384

Malware in sbrugna...

EUVD-2017-1382

Malware in sbrugna...

EUVD-2017-1383

Malware in sbrugna...

kitto denial of service vulnerability

kitto is an interactive dashboard framework written using Elixir. A security vulnerability exists in kitto's processing memory, allowing remote attackers to exploit the vulnerability to submit special requests and obtain sensitive information...

kitto directory traversal vulnerability

kitto is an interactive dashboard framework written using Elixir. A directory traversal vulnerability exists in kitto, which allows remote attackers to submit a specially crafted request to view the contents of system files with WEB privileges...

kitto cross-site scripting vulnerability

kitto is an interactive dashboard framework written using Elixir. A cross-site scripting vulnerability exists in the kitto 404 page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

CVE-2017-1000064

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

CVE-2017-1000064

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

Directory traversal

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000062: Improper Limitation of a Pathname to a Restricted Directory

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000062

The CVE-2017-1000062 entry concerns kittoframework kitto 0.5.1, which is vulnerable to a directory traversal flaw in the router that can lead to remote code execution. Public references describe kitto as an Elixir-based interactive dashboard framework; the vulnerability originates from improper v...

CVE-2017-1000063

The CVE-2017-1000063 entry affects kitto framework (kitto version 0.5.1) and is caused by a cross-site scripting (XSS) flaw on the 404 page. The vulnerability enables remote attackers to inject malicious script/HTML, which can be used to steal sensitive information or hijack user sessions when vi...

PT-2017-10771

Name of the Vulnerable Software and Affected Versions kittoframework kitto version 0.5.1 Description The issue concerns memory exhaustion in the router, which can result in a denial of service DoS. Recommendations For kittoframework kitto version 0.5.1, at the moment, there is no information abou...

PT-2017-10769

Name of the Vulnerable Software and Affected Versions kittoframework kitto version 0.5.1 Description The issue allows for directory traversal in the router, resulting in remote code execution. Recommendations For kittoframework kitto version 0.5.1, at the moment, there is no information about a...

PT-2017-10770

Name of the Vulnerable Software and Affected Versions kittoframework kitto version 0.5.1 Description The issue concerns an XSS vulnerability in the 404 page, which can lead to information disclosure. Recommendations For kitto version 0.5.1, update to a version that fixes the XSS vulnerability in...