Lucene search
+L

28947 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/05 12:00 a.m.•2 views

CVE-2025-44964: Improper Certificate Validation

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

3.9CVSS6AI score0.00105EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/08/05 12:00 a.m.•25 views

PT-2025-31933 · Bluestacks · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks version 5.20 Description: A lack of SSL certificate validation allows attackers to execute a man-in-the-middle attack and obtain sensitive information. Recommendations: At the moment, there is no information about a newer version...

3.9CVSS6.3AI score0.00105EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2025/08/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-49812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack a...

7.4CVSS7.2AI score0.00614EPSS
SaveExploits1References2
The Hacker News
The Hacker News
•added 2025/08/04 11:00 a.m.•28 views

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/08/04 11:00 a.m.•17 views

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/04 9:33 a.m.•30 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS7.2AI score0.00267EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/01 11:15 p.m.•22 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00267EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/08/01 11:04 p.m.•18 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS6.5AI score
SaveExploits0References5
CVE
CVE
•added 2025/08/01 11:04 p.m.•135 views

CVE-2025-54792

LocalSend (open-source file sharing app) is affected in versions 1.16.1 and earlier. A vulnerability in the discovery protocol permits an unauthenticated attacker on the same local network to impersonate legitimate devices, enabling silent interception and modification of file transfers. Impact i...

9.3CVSS7.1AI score0.00267EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/08/01 11:04 p.m.•24 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00267EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/08/01 11:04 p.m.•22 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS6.3AI score0.00267EPSS
SaveExploits1References3
Mend
Mend
•added 2025/08/01 11:04 p.m.•10 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00267EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•19 views

PT-2025-31704 · Localsend · Localsend

Name of the Vulnerable Software and Affected Versions: LocalSend versions 1.16.1 and earlier Description: LocalSend is an open-source application designed for secure file and message sharing between nearby devices on local networks without requiring an internet connection. A critical...

9.3CVSS6.4AI score0.00267EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•15 views

LocalSend security vulnerability

LocalSend is an open source cross-platform alternative to AirDrop by LocalSend Open Source. A security vulnerability exists in LocalSend 1.16.1 and earlier versions, which stems from the discovery of a man-in-the-middle attack vulnerability in the protocol that could lead to file transfer...

9.3CVSS6.3AI score0.00267EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•8 views

CVE-2025-54792: Channel Accessible by Non-Endpoint

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS5.7AI score0.00267EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/31 3:15 p.m.•27 views

CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

6.3CVSS0.00168EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/07/31 12:00 a.m.•29 views

CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

0.00168EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/07/31 12:00 a.m.•13 views

CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

6.5AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•7 views

CVE-2024-34328: URL Redirection to Untrusted Site

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

6.3CVSS6AI score0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/31 12:00 a.m.•33 views

CVE-2024-34328

The access control system Sielox AnyWare v2.1.2 is vulnerable to an open redirect caused by improper validation of the Host header when generating absolute URLs during redirection. An attacker can craft a URL with a modified Host header to redirect users to a malicious domain, potentially enablin...

6.3CVSS6.6AI score0.00168EPSS
SaveExploits0References2
Rows per page
Query Builder