CVE-2020-24377

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24374

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

CVE-2020-24374

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

Design/Logic Flaw

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

Design/Logic Flaw

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

Design/Logic Flaw

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24377

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

CVE-2020-24377

CVE-2020-24377 is a DNS rebinding vulnerability in the Freebox OS web interface of Freebox Server prior to 4.2.3. The issue affects the web UI component used to manage the device and is driven by DNS rebinding. Impact is described as high, with the potential for unauthorized actions via the web i...

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24376

CVE-2020-24376 describes a DNS rebinding vulnerability in the UPnP Internet Gateway Device (IGD) implementations of Freebox v5 prior to 1.5.29 and Freebox Server prior to 4.2.3. The connected records confirm the affected products and versions and reiterate the same vulnerability description. No d...

CVE-2020-24374

The CVE-2020-24374 entry describes a DNS rebinding vulnerability in Freebox v5 prior to 1.5.29. The available connected sources indicate that the issue affects Freebox software (v5) and that upgrading to version 1.5.29 or later mitigates the vulnerability (per PT-2020-15716). CVSS metrics in the ...

CVE-2020-24374

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

PT-2020-15716 · Free · Freebox

Name of the Vulnerable Software and Affected Versions: Freebox version 1.5.28 and earlier Description: A DNS rebinding issue affects the software, potentially allowing unauthorized access. Recommendations: For versions prior to 1.5.29, update to version 1.5.29 or later to resolve the issue...

PT-2020-15719 · Freebox · Freebox Server

Name of the Vulnerable Software and Affected Versions: Freebox Server versions prior to 4.2.3 Description: A DNS rebinding issue affects the Freebox OS web interface. This could potentially allow for malicious actions. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later...

Man-in-the-Middle (MitM)

activemq-broker is vulnerable to man-in-the-middleMitM attack. It binds the server to jmxrmi entry after creating JMX RMI registry using LocateRegistry.createRegistry, leading to the connection to the registry without authentication and allowing rebinding of jmxrmi to any other entity. Therefore,...

PT-2020-13781 · Apache +2 · Apache Activemq +2

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions prior to 5.15.12 Description: The issue allows an attacker to connect to the JMX RMI registry without authentication and rebind the jmxrmi entry. By creating a proxy server, an attacker can intercept user credentials...

Behave - A Monitoring Browser Extension For Pages Acting As Bad Boys

A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

CVE-2019-15312

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an...