Lucene search
+L

28916 matches found

Cvelist
Cvelist
•added 2025/08/06 3:25 p.m.•24 views

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS0.00202EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/08/06 3:25 p.m.•11 views

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS5.4AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/06 12:00 a.m.•49 views

PT-2025-32183

Name of the Vulnerable Software and Affected Versions Eaton affected versions not specified Description The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented, potentially allowing an attacker to perform a Man-in-the-middle attack...

5.7CVSS5.5AI score0.00202EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•6 views

CVE-2025-48393: Improper Certificate Validation

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/06 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-49146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to require...

8.2CVSS7.2AI score0.00486EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/05 3:15 p.m.•21 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

3.9CVSS0.00105EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/05 12:00 a.m.•10 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

7.2AI score0.00105EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/08/05 12:00 a.m.•30 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

0.00105EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/05 12:00 a.m.•62 views

CVE-2025-44964

BlueStacks v5.20 is vulnerable to a Man-in-the-Middle (MITM) attack due to a lack of SSL/TLS certificate validation (CWE-295) during backend API communications. The software fails to verify the server's X.509 certificate chain or match the presented hostname, allowing an adjacent network attacker...

3.9CVSS7.2AI score0.00105EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-49812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack a...

7.4CVSS7.2AI score0.00614EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/05 12:00 a.m.•24 views

PT-2025-31933 · Bluestacks · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks version 5.20 Description: A lack of SSL certificate validation allows attackers to execute a man-in-the-middle attack and obtain sensitive information. Recommendations: At the moment, there is no information about a newer version...

3.9CVSS6.3AI score0.00105EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/05 12:00 a.m.•2 views

CVE-2025-44964: Improper Certificate Validation

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

3.9CVSS6AI score0.00105EPSS
SaveExploits1References3
The Hacker News
The Hacker News
•added 2025/08/04 11:00 a.m.•28 views

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/08/04 11:00 a.m.•16 views

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/04 9:33 a.m.•30 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS7.2AI score0.00267EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/01 11:15 p.m.•22 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00267EPSS
SaveExploits1References3
Mend
Mend
•added 2025/08/01 11:04 p.m.•8 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00267EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/01 11:04 p.m.•135 views

CVE-2025-54792

LocalSend (open-source file sharing app) is affected in versions 1.16.1 and earlier. A vulnerability in the discovery protocol permits an unauthenticated attacker on the same local network to impersonate legitimate devices, enabling silent interception and modification of file transfers. Impact i...

9.3CVSS7.1AI score0.00267EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/08/01 11:04 p.m.•24 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS0.00267EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/08/01 11:04 p.m.•22 views

CVE-2025-54792 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS6.3AI score0.00267EPSS
SaveExploits1References3
Rows per page
Query Builder