180 matches found
uTorrent Portable Detection (Windows SMB Login)
SMB login and WMI file search based detection of uTorrent Portable. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
uTorrent RPC Remote Code Execution
A remote code execution RCE vulnerability exists in uTorrent RPC. The vulnerability is due to lack of validation on requested RPC methods. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted RPC request...
uTorrent Users Warned of Remote Code Execution Vulnerability
Google Project Zero researchers are warning of two critical remote code execution vulnerabilities in popular versions of BitTorrent’s web-based uTorrent Web client and its uTorrent Classic desktop client. According to researchers, the flaws allow a hacker to either plant malware on a user’s...
μTorrent (uTorrent) ClassicWeb - JSON-RPC Remote Code Execution Information Disclosure
μTorrent uTorrent ClassicWeb - JSON-RPC Remote Code Execution Information Disclosure By default, utorrent create an HTTP RPC server on port 10000 uTorrent classic or 19575 uTorrent web. There are numerous problems with these RPC servers that can be exploited by any website using XMLHTTPRequest. T...
utorrent - JSON-RPC Remote Code Execution / Information Disclosure Vulnerabilities
Exploit for multiple platform in category remote exploits By default, utorrent create an HTTP RPC server on port 10000 uTorrent classic or 19575 uTorrent web. There are numerous problems with these RPC servers that can be exploited by any website using XMLHTTPRequest. To be clear, visiting any...
μTorrent (uTorrent) Classic/Web - JSON-RPC Remote Code Execution / Information Disclosure
By default, utorrent create an HTTP RPC server on port 10000 uTorrent classic or 19575 uTorrent web. There are numerous problems with these RPC servers that can be exploited by any website using XMLHTTPRequest. To be clear, visiting any website is enough to compromise these applications. uTorrent...
store.utorrent.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-494199 Description| Value ---|--- Affected Website:| store.utorrent.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on I...
utorrent-s.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-485354 Description| Value ---|--- Affected Website:| utorrent-s.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
utorrent-cgn.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-485232 Description| Value ---|--- Affected Website:| utorrent-cgn.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
The Pirate Bay Caught Running Cryptocurrency Mining Script
By Waqas In 2015, it was reported that uTorrent was secretly installing This is a post from HackRead.com Read the original post: The Pirate Bay Caught Running Cryptocurrency Mining Script...
utorrent.com XSS vulnerability
Vulnerable URL: https://www.utorrent.com/intl/fr/prodnews?v=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 510 VIP website status:| Yes Check utorrent.com SSL...
BitTorrent API Cross-Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent and uTorrent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. These applications expose a web service...
uTorrent Forums User List Stolen
BitTorrent has warned users of its uTorrent client to change their passwords after a third-party breach allowed hackers to walk off with a list of its forum users. “On June 6th, 2016, BitTorrent was made aware of a security issue involving the vendor which powers our forums,” the company said in ...
BitTorrent API Cross Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent and uTorrent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. These applications expose a web service...
utorrent.com XSS vulnerability
Vulnerable URL: http://www.utorrent.com/mailChimp/mailChimpaddress.php?ajax=true=postDL=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:51 GMT Vulnerability type:| XSS Vulnerabili...
BitTorrent Fixes Reflective DDoS Attack Security Flaw
Two weeks ago, we reported how a serious flaw in the popular peer-to-peer BitTorrent file sharing protocols could be exploited to carry out a devastating distributed denial of service DDoS attack, allowing lone hackers with limited resources to take down large websites. Good news is that the...
Popular Download Service μTorrent wants you to pay for its Software
Just to enhance the services being rendered. The popular peer-to-peer file sharing software application is aiming to achieve new heights by making their software be a paid scheme. uTorrent is one of the clients of BitTorrent Inc. the parent company which implements a BitTorrent protocol. Where ea...
How to Exploit BitTorrent for Large-Scale DoS Attacks
A flaw discovered in several widely used BitTorrent applications, including uTorrent, Vuze and Mainline, could be used to carry out a devastating distributed denial of service DDoS attack that makes it very easy for a single undetectable hacker to bring down large sites. A new research by Florian...
