635 matches found
Meterpreter_Paranoid_Mode-SSL
MeterpreterParanoidMode v1.4 - SSL/TLS connections Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam develop @2017 Description: MeterpreterParanoidMode.sh allows users to secure your staged/stageless...
Invoke-SelfSignedWebRequest
Invoke-SelfSignedWebRequest For InfoSec work, using HTTPS is an incredibly handy mechanism for C2 and maneuver within target network space. Further PowerShell is an amazing productivity tool that can help an operator achieve dynamic results. A natural next conclusion is to combine the C2 channel...
SecAdvisory
July 2, 2019 FN21 Man-in-the-middle Vulnerability related to vCenter CVE-2019-11242 Problem Description A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented b...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2026-091364)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091364 advisory. Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can result in arbitrary code execution. This attack appear to be...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient
Summary Apache Commons HttpClient is used by IBM Integrated Analytics System as an HTTP client library. CVE-2012-5783 affects Apache Commons HttpClient 3.1 due to improper SSL certificate hostname verification. The library fails to verify that the server hostname matches the domain name in the...
PYSEC-2026-2368 Apache Airflow missing Certificate Validation
Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability. The default SSL context with SSL library did not check a server's X.509 certificate. Instead, the code accepte...
PT-2026-59325
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...
PT-2026-59087
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...
PT-2026-59656
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...
WS-2019-0330
Machine-In-The-Middle vulnerability found in airtable 0.1.19 before 0.7.2. SSL certificate validation disabled by default. Attacker may decrypt intercepted traffic...
CVE-2025-15612 Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE
Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies o...
CVE-2026-24935
A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...
MiracleLinux 7 : squid-3.5.20-17.el7.10 (AXSA:2024-7673:03)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7673:03 advisory. squid: denial of service in HTTP header parser CVE-2024-25617 squid: denial of service in HTTP request parsing CVE-2023-50269 squid: Buffer over-rea...
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
CVE-2009-4123
The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation...
CVE-2021-31747
Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in updateapplet.php, which could lead to man-in-the-middle attacks...
CVE-2022-42131
Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3...
CVE-2019-11554
The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...
CVE-2019-11688
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...