Lucene search
+L

8964 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2013-3587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which...

5.9CVSS6.8AI score0.06049EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2019-12781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the...

5.3CVSS6.4AI score0.01711EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/03/03 8:09 p.m.•25 views

Security Update for the OPC UA .NET Standard Stack

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints...

5.3CVSS7.3AI score0.00582EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/03/03 11:15 a.m.•21 views

CVE-2025-1868

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS0.00253EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/03 10:53 a.m.•30 views

CVE-2025-1868 Information display on multiple products from Famatech Corp

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS0.00253EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/03 10:53 a.m.•135 views

CVE-2025-1868

CVE-2025-1868 describes an NTLM leakage vulnerability in Famatech’s Advanced IP Scanner and Advanced Port Scanner. When a network scan is initiated, the tools may emit the NTLM hash of the scanning user, enabling an attacker to intercept traffic to a legitimate or fake server to extract the user ...

6.9CVSS6.8AI score0.00253EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/03 10:53 a.m.•9 views

CVE-2025-1868 Information display on multiple products from Famatech Corp

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS6.5AI score0.00253EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•1 views

CVE-2025-1868: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS5.8AI score0.00253EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/26 10:15 p.m.•23 views

CVE-2024-55581

When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...

7.4CVSS0.0029EPSS
SaveExploits1References2
OSV
OSV
•added 2025/02/26 10:15 p.m.•18 views

CVE-2024-55581

When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...

7.4CVSS6.7AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/26 12:00 a.m.•30 views

CVE-2024-55581

When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...

0.0029EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/26 12:00 a.m.•108 views

CVE-2024-55581

The libaws library, specifically when linked with GnuTLS , contains a vulnerability in the AWS.Client default behavior. This flaw allows for a man-in-the-middle (MITM) attack because the client fails to verify an HTTPS server's certificate unless a specific TLS configuration is provided by the pr...

7.4CVSS7.3AI score0.0029EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•13 views

PT-2025-8751 · Adacore +2 · Ada Web Server +3

Name of the Vulnerable Software and Affected Versions: AdaCore Ada Web Server version 25.0.0 Description: The issue concerns a lack of verification of an HTTPS server's certificate in the default behaviour of AWS.Client when linked with GnuTLS, making it vulnerable to a man-in-the-middle attack...

7.4CVSS7.1AI score0.0029EPSS
SaveExploits1References18
Debian CVE
Debian CVE
•added 2025/02/26 12:00 a.m.•28 views

CVE-2024-55581

Removed by vendor...

7.4CVSS7.1AI score0.0029EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/02/24 12:00 a.m.•25 views

AlmaLinux 9 : bind9.18 (ALSA-2025:1670)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1670 advisory. bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187 bind: bind9: DNS-over-HTTPS implementation suffers from multiple...

7.5CVSS7.1AI score0.18367EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/21 11:04 p.m.•41 views

Security Bulletin: This Power System update is being released to address CVE-2023-52881

Summary This affects the BMC's network transmission control protocol TCP interface which affects aspects of interfaces that use TCP including the BMC's secure shell SSH, HTTPS interfaces including the BMC's webserver, REST APIs, and ASMi web application, and event and subscriptions services. An...

9.8CVSS6.4AI score0.00611EPSS
SaveExploits0
Oracle linux
Oracle linux
•added 2025/02/21 12:00 a.m.•34 views

bind9.18 security update

32:9.18.29-1.el95.1 - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion - Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load...

7.5CVSS7.6AI score0.18367EPSS
SaveExploits0
Metasploit
Metasploit
•added 2025/02/20 6:55 p.m.•310 views

HTTPS Fetch, Reverse TCP Stager

Fetch and execute an ARMLE payload from an HTTPS server. Connect back to the attacker Module Options msf use payload/cmd/linux/https/armle/meterpreter/reversetcp msf payloadreversetcp show actions ...actions... msf payloadreversetcp set ACTION msf payloadreversetcp show options ...show and set...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2025/02/20 6:55 p.m.•318 views

HTTPS Fetch

Fetch and execute a PPC64LE payload from an HTTPS server. Module Options msf use payload/cmd/linux/https/ppc64le/meterpreterreversetcp msf payloadmeterpreterreversetcp show actions ...actions... msf payloadmeterpreterreversetcp set ACTION msf payloadmeterpreterreversetcp show options ...show and...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2025/02/20 6:55 p.m.•281 views

HTTPS Fetch

Fetch and execute an MIPSBE payload from an HTTPS server. Module Options msf use payload/cmd/linux/https/mipsbe/meterpreterreversehttps msf payloadmeterpreterreversehttps show actions ...actions... msf payloadmeterpreterreversehttps set ACTION msf payloadmeterpreterreversehttps show options ...sh...

7.2AI score
SaveExploits0
Rows per page
Query Builder