Cross site request forgery (csrf)

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet...

CVE-2022-30563

CVE-2022-30563 affects Dahua ONVIF implementations (ASI7XXX, IPC-HDBW2XXX, IPC-HX2XXX). Root cause: authentication by capture-replay of WS-UsernameToken during ONVIF interactions, enabling an attacker who can sniff unencrypted traffic to replay credentials and log in as the captured user, potenti...

CVE-2022-30562

The CVE-2022-30562 entry describes a vulnerability in Dahua ASI7XXX devices where enabling the HTTPS function allows a MITM attacker to modify the user’s request data, injecting a malicious URL in the Host header that can trigger a 302 redirect to an attacker‑controlled page. This is evidenced by...

CVE-2022-30562

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page...

CVE-2022-30561

The CVE-2022-30561 entry concerns Dahua ASI7XXX devices (and related Dahua product families) vulnerable to an authentication bypass via capture-replay. The root cause is an MITM-capable attacker who can sniff login traffic and replay authentication data to gain access without a password (CWE-294)...

PT-2022-3935

Name of the Vulnerable Software and Affected Versions Dahua ASI7XXX versions prior to v1.000.0000009.0.R.220620 Dahua IPC-HDBW2XXX versions prior to v2.820.0000000.48.R.220614 Dahua IPC-HX2XXX versions prior to v2.820.0000000.48.R.220614 Description The issue is related to the authentication...

CURL-CVE-2022-32208 FTP-KRB bad message verification

When curl does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client...

Security Bulletin: IBM Security Guardium is affected by a mongodb-driver-legacy-4.1.1.jar vulnerability (CVE-2021-20328)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2021-20328 DESCRIPTION: MongoDB Java driver is vulnerable to a man-in-the-middle attack, caused by improper host name verification on the KMS server's certificate. An attacker could exploit this...

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

Information disclosure

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2022-21184

The CVE-2022-21184 affects Bachmann Visutec GmbH Atvise 3.5.4, 3.6, and 3.7. The root cause is an information disclosure in the License registration flow where login credentials are sent in plaintext over HTTP, enabling credential exposure via a man-in-the-middle attack. Documented impact is disc...

Design/Logic Flaw

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

Code injection

'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack...

CVE-2022-29482

The CVE-2022-29482 entry concerns the Mobaoku-Auction & Flea Market iOS app, where improper server certificate verification (CWE-295) in versions prior to 5.5.16 enables a man-in-the-middle to eavesdrop on encrypted traffic. The vulnerability is mitigated by upgrading to version 5.5.16, released ...

Lack of certificate verification when establishing secure connections

...

Debian DSA-5153-1 : trafficserver - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5153 advisory. Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling or MITM...

JVN#13878856: Mobaoku-Auction & Flea Market App for iOS vulnerable to improper server certificate verification

Mobaoku-Auction & Flea Market App for iOS provided by DeNA Co., Ltd. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the application Update the application to the...

CVE-2022-29733: Cleartext Transmission of Sensitive Information

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...