4418 matches found
CVE-2017-6873
Siemens OZW672 and OZW772 (all versions) are affected by CVE-2017-6873, where the integrated web server on port 443/TCP can be misused to read and manipulate data in TLS sessions during a MITM attack. The vulnerability is tied to missing authentication for a critical function. Impact is described...
Tenable Nessus Agent 6.x < 6.11 MITM Vulnerability During Linking (TNS-2017-11)
The version of Nessus Agent installed on the remote Windows host is 6.x prior to 6.11. It is, therefore, affected by a MITM vulnerability that can be exploited during the agent linking process. This is due to the fact that during an initial connection to Tenable.io or Nessus Manager when linking...
Virtual Postage (VPA) 1.0 Man-In-The-Middle / Code Execution
Exploit Title: Virtual Postage VPA - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a2.virtualpostage.com http://archive.is/EdtJT Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google API...
SKILLS.com.au Industry App 1.0 Man-In-The-Middle / Code Execution
Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google APIs...
SKILLS.com.au Industry App - Man In The Middle Remote Code Execution
SKILLS.com.au Industry App - Man In The Middle Remote Code Execution Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link:...
Virtual Postage (VPA) - Man In The Middle Remote Code Execution
Exploit Title: Virtual Postage VPA - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a2.virtualpostage.com http://archive.is/EdtJT Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google API...
Oracle Database Multiple Vulnerabilities (July 2017 CPU) (POODLE) (SWEET32)
The remote Oracle Database Server is missing the July 2017 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting...
Virtual Postage (VPA) - Man In The Middle Remote Code Execution
Virtual Postage VPA - Man In The Middle Remote Code Execution Exploit Title: Virtual Postage VPA - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a2.virtualpostage.com http://archive.is/EdtJT Software Link: N/A...
SKILLS.com.au Industry App - Man In The Middle Remote Code Execution
Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google APIs...
CVE-2017-1000007
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
Information disclosure
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
CVE-2017-1000007
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
PYSEC-2017-85
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
CVE-2017-1000007
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
CVE-2017-1000007
The CVE-2017-1000007 entry concerns txAWS (all current versions) failing to perform complete certificate verification, creating vulnerability to MitM attacks and information disclosure. The connected documents corroborate that the underlying issue is improper TLS/server-certificate validation in ...
Samba Man in the Middle Security Bypass Vulnerability (Heimdal)
Samba is prone to a MITM authentication validation bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
samba -- Orpheus Lyre mutual authentication validation bypass
The samba project reports: A MITM attacker may impersonate a trusted server and thus gain elevated access to the domain by returning malicious replication or authorization data...
FreeBSD-SA-17:05.heimdal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-17:05.heimdal Security Advisory The FreeBSD Project Topic: heimdal KDC-REP service name validation vulnerability Category: contrib Module: heimdal Announced:...
Man-in-the-Middle (MitM)
ikst is vulnerable to resources downloaded through insecure protocol. The library downloads resources through HTTP, allowing a man-in-the-middle attack to tamper with the content in transit...
Man-in-the-Middle (MitM)
Moodle is vulnerable to man-in-the-middle MitM attacks. The repository/s3/S3.php does not verify that the host is secure before curling to it. This can allow a malicious user to conduct a MitM attack...