24 matches found
EUVD-2025-5766
Malicious code in bioql PyPI...
EUVD-2025-25966
Malicious code in bioql PyPI...
EUVD-2025-25967
Malicious code in bioql PyPI...
EUVD-2025-25965
Malicious code in bioql PyPI...
CVE-2025-58125
Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic...
CVE-2025-58127
Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic...
CVE-2025-58127
Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic...
CVE-2025-58127
CVE-2025-58127 concerns an improper certificate validation flaw in the Checkmk Exchange plugin for Dell PowerScale. The underlying issue is TLS/SSL certificate validation failure, which can allow an attacker in a network position to perform a Man-in-the-Middle (MitM) attack and intercept traffic....
CVE-2025-58126
CVE-2025-58126 affects the Checkmk Exchange plugin for VMware vSAN. The root cause is improper certificate validation (TLS/SSL) in the plugin, which permits a man-in-the-middle attacker to intercept traffic. Documented impact is exposure of communications in MitM scenarios; exploitation details a...
PT-2025-35080
Name of the Vulnerable Software and Affected Versions: Checkmk versions affected versions not specified Description: The Checkmk Exchange plugin check-mk-api contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM position to intercept networ...
Checkmk Exchange plugin check-mk-api 安全漏洞
Checkmk Exchange plugin check-mk-api is a plugin from Checkmk, Inc. A security vulnerability exists in Checkmk Exchange plugin check-mk-api, which stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...
Checkmk Exchange plugin Dell Powerscale 安全漏洞
Checkmk Exchange plugin Dell Powerscale is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Dell Powerscale that stems from improper certificate validation, which could lead to a man-in-the-middle attacker intercepting traffic...
Checkmk Exchange plugin Freebox v6 agent 安全漏洞
Checkmk Exchange plugin Freebox v6 agent is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Freebox v6 agent that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...
PT-2025-35082
Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin VMware vSAN affected versions not specified Description: The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM positi...
PT-2025-35083
Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Dell Powerscale affected versions not specified Description: The Checkmk Exchange plugin for Dell Powerscale contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle Mit...
CVE-2024-38861
Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...
CVE-2024-47092
Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1...
CVE-2024-47092
Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1...
CVE-2024-47092 Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api
Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1...
CVE-2024-47092
CVE-2024-47092 affects the Checkmk Exchange plugin check-mk-api prior to 5.8.1. The underlying issue is insecure deserialization and improper certificate validation in the plugin, with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS4 base score 7.7 (HIGH). Attack vector is NETWORK with no user inter...