CVE-2025-58123

CVE-2025-58123 affects the Checkmk Exchange plugin BGP Monitoring. The root cause is improper certificate validation, enabling MitM attackers to intercept traffic when positioned on the network. Documented sources confirm the vulnerability description but do not provide explicit affected versions...

AegisShield: Democratizing Cyber Threat Modeling with Generative AI

The increasing sophistication of technology systems makes traditional threat modeling hard to scale, especially for small organizations with limited resources. This paper develops and evaluates AegisShield, a generative AI enhanced threat modeling tool that implements STRIDE and MITRE ATT&CK to...

Checkmk Exchange plugin BGP Monitoring 安全漏洞

Checkmk Exchange plugin BGP Monitoring is a session visualization management and service state monitoring software from Checkmk, Germany. A security vulnerability exists in Checkmk Exchange plugin BGP Monitoring that stems from improper certificate validation and could lead to a man-in-the-middle...

PT-2025-35082

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin VMware vSAN affected versions not specified Description: The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM positi...

Checkmk Exchange plugin Freebox v6 agent 安全漏洞

Checkmk Exchange plugin Freebox v6 agent is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Freebox v6 agent that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

PT-2025-35098

Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to 20.15.2 Asterisk versions prior to 21.10.2 Asterisk versions prior to 22.5.2 Description: Asterisk is an open source private branch exchange and telephony toolkit. If a Session Initiation Protocol SIP request is...

PT-2025-35081

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Freebox v6 agent affected versions not specified Description: The Checkmk Exchange plugin Freebox v6 agent contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM...

PT-2025-35083

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Dell Powerscale affected versions not specified Description: The Checkmk Exchange plugin for Dell Powerscale contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle Mit...

PT-2025-35080

Name of the Vulnerable Software and Affected Versions: Checkmk versions affected versions not specified Description: The Checkmk Exchange plugin check-mk-api contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM position to intercept networ...

Checkmk Exchange plugin check-mk-api 安全漏洞

Checkmk Exchange plugin check-mk-api is a plugin from Checkmk, Inc. A security vulnerability exists in Checkmk Exchange plugin check-mk-api, which stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

Checkmk Exchange plugin Dell Powerscale 安全漏洞

Checkmk Exchange plugin Dell Powerscale is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Dell Powerscale that stems from improper certificate validation, which could lead to a man-in-the-middle attacker intercepting traffic...

GHSA-C2GV-XGF5-5CC2

creationtimestamp| type| source ---|---|--- 2025-08-27 18:57:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115102255675248188...

GHSA-PF6X-CJMP-QQQQ

creationtimestamp| type| source ---|---|--- 2025-08-27 17:26:00+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115101896527557647...

CVE-2025-34157

creationtimestamp| type| source ---|---|--- 2025-08-27 17:04:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101811324852634 2025-08-30 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhuav53f2o...

CVE-2025-20317

creationtimestamp| type| source ---|---|--- 2025-08-27 16:04:10+00:00| seen| https://gist.github.com/Darkcrai86/ec5b7f6eb7a33b6dd9683e67ec4da2b6 2025-08-27 16:44:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101734512649230 2025-09-02 10:39:43+00:00| seen|...

CVE-2025-43728

creationtimestamp| type| source ---|---|--- 2025-08-27 13:57:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101075327064840 2025-08-27 16:08:53+00:00| seen| https://gist.github.com/Darkcrai86/3f9316e8d70026120df015a61e07379d...

CVE-2025-9528

creationtimestamp| type| source ---|---|--- 2025-08-27 13:21:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115100934432942527 2025-11-25 21:02:41+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagq53b62e...

Linux Distros Unpatched Vulnerability : CVE-2023-30570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

The vulnerability of the Internet Key Exchange version 1 protocol (IKEv1) in Cisco IOS XE operating systems allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange version 1 IKEv1 protocol in Cisco IOS XE operating systems is related to improper handling of undefined values. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...