The vulnerability of the moment.js agent’s RedCheck component allows a hacker to gain access to files on the server beyond the expected localization directory.

The vulnerability of the moment.js agent’s RedCheck component is related to an incorrect path limit for the access-controlled directory. Exploiting this vulnerability could allow a malicious actor to gain access to files on the server beyond the expected directory location...

The vulnerability of the moment.js component of the RedCheck scanning agent allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the moment.js agent’s RedCheck scanning component is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a Denial-of-Service Attack DoS...

The vulnerability of the REST API component of the RedCheck scanning agent allows attackers to execute attacks such as Man-in-the-middle (MITM) attacks, SSL Striping, and passive interceptors like Firesheep.

The vulnerability of the REST API component of the RedCheck scanning agent is related to the absence of the HTTP Strict-Transport-Security HSTS header. Exploiting this vulnerability allows a malicious actor to carry out attacks such as Man-in-the-middle MITM attacks, SSL Striping, and passive...

PT-2025-54601

Уязвимость компонента REST API агента сканирования RedCheck связана с отсутствием заголовка HTTP Strict-Transport-Security HSTS. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить атаки типа человек по середине Man-in-the-middle MITM, SSL Striping и пассивных...