Tinxy WiFi Lock Controller v1 has a RF security vulnerability

Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in Tinxy WiFi Lock Controller v1 RF, which originates from transmitting sensitive information in clear text and could lead to a man-in-the-middle attack...

Curl 8.8.0 < 8.14.0 Improper Certificate Validation (CVE-2025-4947)

The version of Curl installed on the remote host is is missing security update. It is, therefore, affected by a improper certificate validation vulnerability. - libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the...

CVE-2025-44612

The Tinxy WiFi Lock Controller v1 RF is vulnerable to a security flaw where it transmits sensitive information, such as device credentials and control information , in plaintext . This lack of encryption allows an attacker to perform a man-in-the-middle attack to intercept and access this data. A...

CVE-2025-44612: Cleartext Transmission of Sensitive Information

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...

PT-2025-23233 · Unknown · Tinxy Wifi Lock Controller

Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the transmission of sensitive information in plaintext, including control information and device credentials. This allows attackers to possibly intercept and access...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591: Authentication Bypass by Spoofing

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591

The Open Network Foundation ONOS (specifically version v2.7.0 ) is vulnerable to User Impersonation via the org.onosproject:onos-core-net subsystem. An attacker can send crafted messages containing spoofed IP/MAC addresses to replace those of known hosts, enabling a man-in-the-middle attack on co...

PT-2025-23185 · Open Networking Foundation · Onos

Name of the Vulnerable Software and Affected Versions: Open Network Foundation ONOS version 2.7.0 Description: The issue allows attackers to create fake IP/MAC addresses, potentially enabling a man-in-the-middle attack on communications between fake and real hosts. Recommendations: For Open Netwo...

[SECURITY] [DLA 4182-1] syslog-ng security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4182-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 28, 2025 https://wiki.debian.org/LTS -...

CVE-2025-4947

The libcurl library (and the curl package) is vulnerable to a security issue where it accidentally skips certificate verification for QUIC connections when the host is specified as an IP address in the URL. This flaw prevents the detection of impostor attacks or man-in-the-middle (MITM) attacks. ...

CVE-2025-4947

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...

CVE-2025-4947 QUIC certificate check skip with wolfSSL

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...

libcurl security vulnerabilities

libcurl is a free and easy-to-use client-side URL transport library from the cURL open source. A security vulnerability exists in libcurl that stems from QUIC and HTTP/3 connections that do not perform certificate public key fixing checks, which could lead to a man-in-the-middle attack...

libcurl security vulnerabilities

libcurl is a free and easy-to-use client-side URL transport library from the cURL open source. A security vulnerability exists in libcurl that stems from skipping certificate validation during QUIC connections, which could lead to a man-in-the-middle attack...

CVE-2025-4947: Improper Certificate Validation

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...