34 matches found
EUVD-2018-7368
Malware in sbrugna...
CVE-2024-25728
ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers, which may allow remote attackers to obtain sensitive information about...
CVE-2020-29238
An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request...
ExpressVPN Bug Leaked DNS Requests for Windows Users
By Waqas Patch Your VPN! ExpressVPN Bug Leaks DNS Requests for Windows Users with Split Tunneling! This is a post from HackRead.com Read the original post: ExpressVPN Bug Leaked DNS Requests for Windows Users...
CVE-2024-25728
ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers, which may allow remote attackers to obtain sensitive information about...
CVE-2024-25728
ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers, which may allow remote attackers to obtain sensitive information about...
ExpressVPN Security Breach
ExpressVPN Router is a VPN router from ExpressVPN UK. It provides a protected network communication feature. A security vulnerability exists in ExpressVPN versions prior to 12.73.0. Attackers use the vulnerability to access sensitive information...
CVE-2024-25728
ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers, which may allow remote attackers to obtain sensitive information about...
PT-2024-2361 · Expressvpn · Expressvpn
Name of the Vulnerable Software and Affected Versions: ExpressVPN versions prior to 12.73.0 on Windows Description: The issue is related to the split tunneling feature in ExpressVPN, which sends DNS requests according to the Windows configuration instead of using the ExpressVPN DNS servers. This...
CVE-2024-25728
ExpressVPN has a DNS leakage issue on Windows for versions prior to 12.73.0 when split tunneling is enabled. The VPN forwards DNS requests according to Windows’ configuration (e.g., to ISP DNS servers) rather than to ExpressVPN’s DNS servers, which may allow remote attackers to infer websites vis...
CVE-2024-25728
ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers, which may allow remote attackers to obtain sensitive information about...
Study shows that 42% of people use their names in passwords
By Waqas ExpressVPN’s study on the most common passwords around the world showed that 42% of people use their first name in their passwords, while 43% of them use their birth date. This is a post from HackRead.com Read the original post: Study shows that 42% of people use their names in passwords...
ExpressVPN Removes VPN Servers in India Rejecting Data Collection Law
By Deeba Ahmed The new law requires service providers to store users web usage patterns, designated IP addresses, etc. for the… This is a post from HackRead.com Read the original post: ExpressVPN Removes VPN Servers in India Rejecting Data Collection Law...
ExpressVPN Removes Servers in India After Refusing to Comply with Government Order
Virtual Private Network VPN provider ExpressVPN on Thursday announced that it's removing Indian-based VPN servers in response to a new cybersecurity directive issued by the Indian Computer Emergency Response Team CERT-In. "Rest assured, our users will still be able to connect to VPN servers that...
ExpressVPN made a choice, and so did I: Lock and Code S02E19
On September 14, the US Department of Justice announced that it had resolved an earlier investigation into an international cyber hacking campaign coming from the United Arab Emirates that has reportedly impacted hundreds of journalists, activists, and human rights defenders in Yemen, Iran, Turke...
Edward Snowden urges users to stop using ExpressVPN
By Waqas Edward Snowden urging all to avoid ExpressVpn after its CIO named in UAE surveillance scandal. This is a post from HackRead.com Read the original post: Edward Snowden urges users to stop using ExpressVPN...
Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns
By Waqas Kape Technologies is an Israeli cybersecurity firm that has bought ExpressVPN for $936 million. However, its users are now flipping out. This is a post from HackRead.com Read the original post: Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns...
ExpressVPN VPN Router 1.0 Integer Overflow
Exploit Title: ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow Date: 09-04-2021 Exploit Author: Jai Kumar Sharma Vendor Homepage: https://www.expressvpn.com/ Software Link: https://www.expressvpn.com/vpn-software/vpn-router Version: version 1 Tested on: Windows/Ubuntu/MacOS CVE ...
ExpressVPN VPN Router 1.0 - Router Login Panels Integer Overflow Vulnerability
Exploit Title: ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow Exploit Author: Jai Kumar Sharma Vendor Homepage: https://www.expressvpn.com/ Software Link: https://www.expressvpn.com/vpn-software/vpn-router Version: version 1 Tested on: Windows/Ubuntu/MacOS CVE : CVE-2020-29238...
ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow
Exploit Title: ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow Date: 09-04-2021 Exploit Author: Jai Kumar Sharma Vendor Homepage: https://www.expressvpn.com/ Software Link: https://www.expressvpn.com/vpn-software/vpn-router Version: version 1 Tested on: Windows/Ubuntu/MacOS CVE ...