RedCheck moment.js Denial-of-Service

The vulnerability of the moment.js agent’s RedCheck scanning component is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a Denial-of-Service Attack DoS...

moment.js RedCheck File Access

The vulnerability of the moment.js agent’s RedCheck component is related to an incorrect path limit for the access-controlled directory. Exploiting this vulnerability could allow a malicious actor to gain access to files on the server beyond the expected directory location...

RedCheck REST API MITM DoS

The vulnerability of the REST API component of the RedCheck scanning agent is related to the absence of the HTTP Strict-Transport-Security HSTS header. Exploiting this vulnerability allows a malicious actor to carry out attacks such as Man-in-the-middle MITM attacks, SSL Striping, and passive...

PT-2025-54601

Уязвимость компонента REST API агента сканирования RedCheck связана с отсутствием заголовка HTTP Strict-Transport-Security HSTS. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить атаки типа человек по середине Man-in-the-middle MITM, SSL Striping и пассивных...