452 matches found
dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +13 more potentially affected by CVE-2019-16865 via pillow (3.4.2)
pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2019-16865 Sour...
openSUSE Security Update : python-mitmproxy (openSUSE-2019-581)
This update for python-mitmproxy fixes the following issues : The following security vulnerability was fixed : - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed : - Fixed a dependency issue with python-ldap3 boo110145...
WiFi-Pumpkin v0.8.7 - Framework for Rogue Wi-Fi Access Point Attack
The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...
openSUSE: Security Advisory for python-mitmproxy (openSUSE-SU-2018:2291-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mac malware intercepts encrypted web traffic for ad injection
Last week, Malwarebytes researcher Adam Thomas found an interesting new piece of Mac malware that exhibits some troubling behaviors, including intercepting encrypted web traffic to inject ads. Let's take a closer look at this adware, which Malwarebytes for Mac detects as OSX.SearchAwesome, to see...
Security update for python-mitmproxy (moderate)
This update for python-mitmproxy fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed: - Fixed a dependency issue with python-ldap3 boo1101457...
openSUSE Security Update : python-mitmproxy (openSUSE-2018-850)
This update for python-mitmproxy fixes the following issues : The following security vulnerability was fixed : - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed : - Fixed a dependency issue with python-ldap3 boo110145...
mitmproxy-escher (1.0.0), mitmproxy-httpolice (0.7.1) potentially affected by CVE-2018-14505 via mitmproxy (3.0.4)
mitmproxy PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher 1.0.0 - mitmproxy-httpolice 0.7.1 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...
lyrebird (>=0.10.4, <=0.10.5) potentially affected by CVE-2018-14505 via mitmproxy (4.0.3)
mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...
lyrebird (>=0.10.4, <=0.10.5) potentially affected by CVE-2018-14505 via mitmproxy (4.0.3)
mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: CVE-2018-14505 Source advisory: GHSA-6M53-C78Q-7QMG...
padsniff (1.1.1) potentially affected by CVE-2018-14505 via mitmproxy (2.0.1)
mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...
padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2018-14505 via mitmproxy (0.18.2)
mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...
mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2018-14505 via mitmproxy (2.0.2)
mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...
GHSA-6M53-C78Q-7QMG Mitmweb in mitmproxy allows DNS Rebinding attacks
mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py...
Mitmweb in mitmproxy allows DNS Rebinding attacks
mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py...
sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by CVE-2018-14505 via mitmproxy (0.17.0)
mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...
DNS Rebinding Attacks
mitmproxy is vulnerable to DNS rebinding attacks. The vulnerability exists due to the lack of enforcement of hostname matching, allowing DNS rebinding attacks...
CVE-2018-14505
mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...
