6465 matches found
Cryptographic Binding Should Not Be Optional: A Formal-Methods Analysis of FIDO UAF Channel Binding
As a case study in cryptographic binding, we present a formal-methods analysis of the cryptographic channel binding mechanisms in the Fast IDentity Online FIDO Universal Authentication Framework UAF authentication protocol, which seeks to reduce the use of traditional passwords in favor of...
Design and Detection of Covert Man-In-The-Middle Cyberattacks on Water Treatment Plants
Cyberattacks targeting critical infrastructures, such as water treatment facilities, represent significant threats to public health, safety, and the environment. This paper introduces a systematic approach for modeling and assessing covert man-in-the-middle MitM attacks that leverage system...
dotnet: .NET Information Disclosure Vulnerability
A flaw exists in certain .NET builds where a man-in-the-middle MITM attacker can prevent or downgrade TLS between a client and an SMTP server. This may cause the client to send credentials or message data over an unencrypted connection, exposing sensitive information to the attacker...
CVE-2025-25253
CVE-2025-25253 describes improper validation of certificate hostnames in FortiProxy (and FortiOS ZTNA proxy) that could allow an unauthenticated attacker in a man-in-the-middle position to intercept and tamper with connections. Affected products/versions from the provided docs include FortiProxy ...
EUVD-2014-6742
Malware in sbrugna...
EUVD-2014-6664
Malware in sbrugna...
EUVD-2014-6549
Malware in sbrugna...
EUVD-2012-6254
Malware in sbrugna...
EUVD-2014-7369
Malware in sbrugna...
EUVD-2019-13461
Malware in sbrugna...
EUVD-2014-5715
Malware in sbrugna...
EUVD-2014-6720
Malware in sbrugna...
EUVD-2014-6518
Malware in sbrugna...
EUVD-2013-6614
Malware in sbrugna...
EUVD-2014-5694
Malware in sbrugna...
EUVD-2014-7628
Malware in sbrugna...
EUVD-2014-6933
Malware in sbrugna...
EUVD-2014-4806
Malware in sbrugna...