113 matches found
certPinningVulnerableOkHttp
Aplicación simple-client de OkHttp vulnerable a CVE-2016-2402 Esto es un fork del simple-client por defecto del proyecto okhttp. Simple-client es una aplicación Java que simplemente hace una petición GET a https://api.github.com y obtiene los nombres de los contribuidores de okhttp. Este fork ha...
cert-pinning-flaw-poc
POC de fallo de fijación de certificados Script POC simple para probar CVE-2016-2402 y fallos similares. Lea mi publicación en el blog para más detalles. Esta utilidad configurará un servidor HTTPS que sirve una cadena de certificados maliciosa al cliente para un dominio específico. Si el tráfico...
cve-2024-8069-exp-Citrix-Virtual-Apps-XEN
CVE-2024-8068 and CVE-2024-8069 Vulnerabilidad de ejecución remota de código no autenticada en Citrix Virtual Apps and Desktops XEN Consulte nuestra publicación de blog para obtener información técnica detallada. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9...
CVE-2022-2402
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3830 2026-07-30 00:01:36+00:00| seen| https://t.me/CVEhub/3830 2026-08-01 01:00:05+00:00| published-proof-of-concept| https://t.me/CVEhub/3830 2026-08-02 00:01:22+00:00| published-proof-of-concept|...
CVE-2026-2402
creationtimestamp| type| source ---|---|--- 2026-07-09 16:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02...
MiracleLinux 8 : ruby:2.6 (AXSA:2021-2402:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2402:01 advisory. rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code CVE-2019-3881 ruby: NUL injection vulnerability o...
Citrix Workspace app for Windows Security Bulletin CVE-2025-4879
Severity - High Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspace app for Windows...
CVE-2024-2402
The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-2402
The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
2402 LTSR target device stuck initializing while checking the status of Hybrid joined machines
...
PVS configuration wizard error - Unable to communicate with license server
When upgrading the PVS farm to PVS 2402, PVS configuration wizard could not progress further if "Validate license server communication" was checked, displaying an error "Unable to communicate with the license server, or the license server version is not compatible with this version of Citrix...
Black area's when launching Horizon app on VDA 2402 CU1
After upgrading our VDA to 2402 cu1 we are presented with black artifacts on launch of Horizon app...
On Prem || FAS 2402 LTSR || FAS with intune certificate
Impacts and limitations of FAS with Intune certificate...
CVE-2025-2402
A hard-coded, non-random password for the object store minio of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It...
CVE-2025-2402
creationtimestamp| type| source ---|---|--- 2025-03-31 06:30:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9593 2025-03-31 06:59:08+00:00| seen| https://bsky.app/profile/potato.software/post/3llnruhrno32t 2025-03-31 10:49:40+00:00| seen| https://t.me/cvedetector/21565 2026-03-25...
CVE-2025-2402
CVE-2025-2402 affects KNIME Business Hub. A hard-coded, non-random password for the object store (MinIO) in all versions except the listed fixes enables an unauthenticated attacker to read/manipulate swapped jobs or in/out data of active jobs, and can cause a denial-of-service by writing large da...
Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pak for Security...
CVE-2024-25634
alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, an attacker can access data from other organizers. The attacker can use a specially crafted request to receive the e-mail log sent by other events. Version 2.0-M4-2402 fixes this issue...
EPA Client Removed When Workspace App is Upgraded from 2402 to 2402 CU1
Endpoints have Workspace app 2402 installed along with EPA Client Endpoints have been upgraded to Workspace app 2402 CU1 After upgrade, the EPA client has been removed...