SICAM TOOLBOX II Man-in-the-Middle

The vulnerability of the SICAM TOOLBOX II engineering software is related to improper verification of the TLS certificate. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

SICAM TOOLBOX II Man-in-the-Middle

The vulnerability of the SICAM TOOLBOX II engineering software is related to improper verification of the TLS certificate. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

CVE-2025-30024

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...

CVE-2025-53861

A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle MitM and Cross-site scripting XSS attacks allowing attackers to read transmitted data...

CVE-2025-53861

The CVE-2025-53861 vulnerability affects Red Hat Ansible, where cookies are set without the secure flag over non‑encrypted channels. This exposes transmitted data to potential disclosure via Man-in-the-Middle (MitM) and can enable Cross‑Site Scripting (XSS) attempts. The underlying issue is cooki...

CVE-2025-53861 Aap: sensitive cookie(s) set without security flags

A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle MitM and Cross-site scripting XSS attacks allowing attackers to read transmitted data...

CVE-2025-30024

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...

CVE-2025-30024

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...

CVE-2025-30024

Axis Communications Axis.Remoting protocol flaws in the client–server communication could enable a man-in-the-middle attack on Axis Device Manager and related Camera Station products. The CVE-2025-30024 entry specifically notes a MITM bypass of authentication/flow integrity, with an impact score ...

CVE-2025-30024

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...

Azure Linux 3.0 Security Update: erlang (CVE-2025-46712)

The version of erlang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46712 advisory. - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for...

AXIS Device Manager 安全漏洞

AXIS Device Manager is a device manager from Axis Sweden. AXIS Device Manager has a security vulnerability that originates from a flaw in the communication protocol between the client and the server, which could lead to a man-in-the-middle attack...

PT-2025-29201

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The communication protocol used between the client and server has a flaw that could be leveraged to execute a man-in-the-middle attack. Recommendations At the moment, there is no...

CBL Mariner 2.0 Security Update: erlang (CVE-2025-46712)

The version of erlang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46712 advisory. - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for...

PT-2025-29228 · Red Hat · Ansible

Name of the Vulnerable Software and Affected Versions: Ansible affected versions not specified Description: A flaw exists in Ansible where sensitive cookies without security flags transmitted over non-encrypted channels can lead to Man-in-the-Middle MitM and Cross-site scripting XSS attacks...

CVE-2025-30024: Improper Certificate Validation

The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...

CVE-2025-49812

In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommend...

CVE-2025-49812

Apache HTTP Server versions through 2.4.63 are vulnerable to an HTTP desynchronisation attack via mod_ssl . Specifically, a man-in-the-middle attacker can hijack an HTTP session using a TLS upgrade . This issue only affects configurations where "SSLEngine optional" is used to enable TLS upgrades....

CVE-2025-49812 Apache HTTP Server: mod_ssl TLS upgrade attack

In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommend...

CVE-2025-49812: Improper Authentication

In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommend...