Lucene search
+L

21705 matches found

Vulnrichment
Vulnrichment
added 2025/08/05 12:0 a.m.7 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

7.2AI score0.00105EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/05 12:0 a.m.17 views

PT-2025-31933 · Bluestacks · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks version 5.20 Description: A lack of SSL certificate validation allows attackers to execute a man-in-the-middle attack and obtain sensitive information. Recommendations: At the moment, there is no information about a newer version...

3.9CVSS6.3AI score0.00105EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/08/05 12:0 a.m.19 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

0.00105EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/05 12:0 a.m.39 views

CVE-2025-44964

CVE-2025-44964 concerns BlueStacks, version 5.20, with a reported lack of SSL certificate validation. This defect enables potential man-in-the-middle attacks and exposure of sensitive information. The NVD/CVE entry lists a CVSS v3.1 base score of 3.9 (LOW) with adjacent attack vector, high comple...

3.9CVSS7.2AI score0.00105EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-49812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack a...

7.4CVSS7.2AI score0.00516EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/08/04 11:0 a.m.14 views

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/04 9:33 a.m.17 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS7.2AI score0.00257EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/01 11:15 p.m.10 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00257EPSS
SaveExploits1References3
CVE
CVE
added 2025/08/01 11:4 p.m.119 views

CVE-2025-54792

LocalSend (open-source file sharing app) is affected in versions 1.16.1 and earlier. A vulnerability in the discovery protocol permits an unauthenticated attacker on the same local network to impersonate legitimate devices, enabling silent interception and modification of file transfers. Impact i...

9.3CVSS7.1AI score0.00257EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/08/01 11:4 p.m.13 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00257EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/01 11:4 p.m.8 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS6.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/08/01 11:4 p.m.6 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS6.3AI score0.00257EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.6 views

LocalSend 安全漏洞

LocalSend is an open source cross-platform alternative to AirDrop by LocalSend Open Source. A security vulnerability exists in LocalSend 1.16.1 and earlier versions, which stems from the discovery of a man-in-the-middle attack vulnerability in the protocol that could lead to file transfer...

9.3CVSS6.3AI score0.00257EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/08/01 12:0 a.m.8 views

PT-2025-31704 · Localsend · Localsend

Name of the Vulnerable Software and Affected Versions: LocalSend versions 1.16.1 and earlier Description: LocalSend is an open-source application designed for secure file and message sharing between nearby devices on local networks without requiring an internet connection. A critical...

9.3CVSS6.4AI score0.00257EPSS
SaveExploits1References11
NVD
NVD
added 2025/07/31 3:15 p.m.13 views

CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

6.3CVSS0.00168EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/07/31 12:0 a.m.6 views

CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

6.5AI score0.00168EPSS
SaveExploits0References2
CVE
CVE
added 2025/07/31 12:0 a.m.19 views

CVE-2024-34328

Sielox AnyWare v2.1.2 is affected by an open redirect vulnerability that can enable a man-in-the-middle attack via a crafted URL. The condition is a redirect flaw in the application’s flow, not necessarily authenticated user actions, leading to potential interception or manipulation of traffic. T...

6.3CVSS6.6AI score0.00168EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/31 12:0 a.m.17 views

CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

0.00168EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/07/28 4:12 a.m.15 views

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide

Cybersecurity researchers have discovered over a dozen security vulnerabilities impacting Tridium's Niagara Framework that could allow an attacker on the same network to compromise the system under certain circumstances. "These vulnerabilities are fully exploitable if a Niagara system is...

9.8CVSS8.2AI score0.07565EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:0 a.m.11 views

The vulnerability of the TLS protocol implementation in the Crowdstrike Falcon endpoint protection software allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the TLS protocol implementation in the Crowdstrike Falcon endpoint protection software is related to the lack of trust chain tracking during certificate verification. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

8.1CVSS5.7AI score0.00251EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder