Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2024/07/19 7:45 p.m.•54 views

CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS0.00272EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/19 7:45 p.m.•94 views

CVE-2024-41124

CVE-2024-41124 affects the Puncia CLI (Official CLI for Subdomain Center & Exploit Observer) where API_URLS communicated over HTTP instead of HTTPS. Root cause: cleartext transmission enabling eavesdropping, data tampering, unauthorized data access, and MITM risks. The issue is mitigated in relea...

6.3CVSS5.7AI score0.00272EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/19 7:45 p.m.•26 views

CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS5.7AI score0.00272EPSS
SaveExploits0References3
Mend
Mend
•added 2024/07/19 7:45 p.m.•17 views

CVE-2024-41124

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS5.7AI score0.00272EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/19 12:00 a.m.•7 views

CVE-2024-41124: Cleartext Transmission of Sensitive Information

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS5.7AI score0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder