what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from DEFCESCO

KiTTY 0.76.1.13 Buffer Overflows

Posted Feb 8, 2024

Authored by DEFCESCO

KiTTY versions 0.76.1.13 and below suffer from buffer overflows related to ANSI escape sequences. Two exploits are included as proof of concepts as well as a full documented breakdown of the issues.

tags | exploit, overflow, proof of concept

advisories | CVE-2024-25003, CVE-2024-25004

SHA-256 | 1f71c297de8e15269afccee5fe50775bb9e2e1ea8407831ab9883313d3078f04

Download | Favorite | View

KiTTY 0.76.1.13 Command Injection

Posted Feb 8, 2024

Authored by DEFCESCO

KiTTY versions 0.76.1.13 and below suffer from a command injection vulnerability when getting a remote file through scp. It appears to leverage an ANSI escape sequence issue which is quite an interesting vector of attack.

tags | exploit, remote

advisories | CVE-2024-23749

SHA-256 | 9f28adde33c5791a14e7705f8844a344ce30e9443338e16ab264e1393fd4e9a8

Download | Favorite | View