Lucene search
+L

4 matches found

CVE
CVE
•added 2024/07/19 7:45 p.m.•89 views

CVE-2024-41124

CVE-2024-41124 affects the Puncia CLI (Official CLI for Subdomain Center & Exploit Observer) where API_URLS communicated over HTTP instead of HTTPS. Root cause: cleartext transmission enabling eavesdropping, data tampering, unauthorized data access, and MITM risks. The issue is mitigated in relea...

6.3CVSS6.3AI score0.0027EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/19 7:45 p.m.•23 views

CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS6.8AI score0.0027EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/07/19 7:45 p.m.•49 views

CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS0.0027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/19 12:00 a.m.•3 views

CVE-2024-41124: Cleartext Transmission of Sensitive Information

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS5.7AI score0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder