mitmproxy-escher (1.0.0), mitmproxy-httpolice (0.7.1) potentially affected by CVE-2018-14505 via mitmproxy (3.0.4)

mitmproxy PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher 1.0.0 - mitmproxy-httpolice 0.7.1 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

lyrebird (>=0.10.4, <=0.10.5) potentially affected by CVE-2018-14505 via mitmproxy (4.0.3)

mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2018-14505 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

padsniff (1.1.1) potentially affected by CVE-2018-14505 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2018-14505 via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by CVE-2018-14505 via mitmproxy (0.17.0)

mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

UBUNTU-CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

PYSEC-2018-56

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

PYSEC-2018-56

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

Design/Logic Flaw

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

CVE-2018-14505 affects mitmproxy’s mitmweb (v4.0.3) with DNS rebinding flaws in tools/web/app.py. Documented in multiple advisories (GHSA, OpenSUSE/NASL) as fixed in v4.0.4+; impact described as allowing DNS rebinding attacks. REMEDIATION: upgrade to mitmproxy ≥4.0.4 or apply vendor patches that ...

lyrebird (>=0.10.4, <=0.10.5), mitmproxy-escher (>=0.1.2, <=1.0.0) +5 more potentially affected by CVE-2018-14505 via mitmproxy (>=0.17.0, <=4.0.3)

mitmproxy PYPI version =0.17.0, =0.10.4, =0.1.2, =0.9.0, =1.1.1, =1.3.1 Source cves: CVE-2018-14505 Source advisory: MEND:CVE-2018-14505...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505: Improper Input Validation

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

PT-2018-12554

Name of the Vulnerable Software and Affected Versions mitmproxy versions prior to 4.0.4 Description The issue allows DNS Rebinding attacks, related to tools/web/app.py. This affects mitmweb in mitmproxy. Recommendations For versions prior to 4.0.4, update to version 4.0.4 or later to resolve the...

Free and Open Source Interactive HTTPS Proxy: mitmproxy

mitmproxy is your swiss-army knife for debugging, testing, privacy measurements, and penetration testing. It can be used to intercept, inspect, modify and replay web traffic such as HTTP/1, HTTP/2, WebSockets, or any other SSL/TLS-protected protocols. You can prettify and decode a variety of...

Ikraus Anti Virus Remote Code Execution(CVE-2017-15643)

Vulnerability summary The following advisory describes an remote code execution found in Ikraus Anti Virus version 2.16.7. KARUS anti.virus “secures your personal data and PC from all kinds of malware. Additionally, the Anti-SPAM module protects you from SPAM and malware from e-mails. Prevent...