Lucene search
+L

117 matches found

Kitploit
Kitploit
added 2026/09/02 2:11 a.m.3 views

CVE-2025-45620

問題の詳細 カメラモデル PTC310UV2 はファームウェアバージョン 0.1.0000.59 を実行しています。脆弱性はカメラにアクセスするために使用されるWebインターフェースで発見されました。この脆弱性はペネトレーションテスト中に発見されたため、PoCのスクリーンショットの一部の情報は編集されています。 説明 この開示には、AVerファームウェアのログインWebインターフェースで特定された2つの脆弱性が含まれています。なお、私はあなたの製品にあまり詳しくないため、一部の用語が正しく使用されていない可能性があることに注意してください。...

8.1CVSS5.9AI score0.00744EPSS
SaveExploits2
NVD
NVD
added 2026/08/25 4:17 p.m.8 views

CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

9.3CVSS0.00132EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/21 3:16 p.m.11 views

CVE-2026-77812

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

9.4CVSS0.00062EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 6:32 p.m.12 views

EUVD-2026-63545

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

6.3CVSS5.5AI score0.00292EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/06/05 7:13 p.m.22 views

CVE-2026-46398 HAX CMS Missing Secure Flag on Cookie

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.0.0, the haxcmsrefreshtoken cookie is set without the Secure flag. This allows it to be transmitted over unencrypted HTTP, making it vulnerable to theft via packet sniffing on t...

8.8CVSS5.4AI score0.00183EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/03 6:03 p.m.10 views

CVE-2026-8874

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS...

5.8AI score0.00138EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/01 9:17 a.m.37 views

CVE-2026-25599

CVE-2026-25599 involves Orca heat pump devices communicating with the Orca server over unencrypted HTTP, with missing authentication and input validation on aggregated data. This combination enables stored XSS in the heat pump web control interface and potential cookie theft, as well as attacker ...

6.3CVSS5.9AI score0.00114EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/01 9:17 a.m.47 views

CVE-2026-25599 Missing authentication and clear‑text data transmission affecting Orca heat pumps

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to stored XSS that enables theft of cookies from the pump’s web control interface. Older Orca heat pump devices...

6.3CVSS0.00114EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 10:02 a.m.15 views

CVE-2026-3012

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability t...

8CVSS5.8AI score0.00261EPSS
SaveExploits0References14
OSV
OSV
added 2026/05/25 3:29 p.m.31 views

MAL-2026-4744 Malicious code in cch-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba1bd1e6bb56f0c9816ab482e2ee7cc3a8f04d9e253dd3afa67e4c71b3ae3a2 simpleagent/init.py re-exports ask and chat from simpleagent/client.py. Both entry points ignore caller-supplied configuration and route the caller's...

5.4AI score
SaveExploits0References4
NVD
NVD
added 2026/05/22 10:16 a.m.23 views

CVE-2026-25608

STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens. This issue was fixed in version 9.5...

2.3CVSS0.00208EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/22 9:14 a.m.11 views

CVE-2026-25608

STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens. This issue was fixed in version 9.5...

2.3CVSS5.8AI score0.00208EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/14 9:30 p.m.14 views

EUVD-2026-30372

Foscam VD1 Video Doorbell before V5.3.131072 is vulnerable to Cleartext Transmission of Sensitive Information. The device transmits sensitive Session Description Protocol SDP, including ICE credentials and candidates, in cleartext over network interfaces. An attacker with network visibility can...

5.9AI score0.00131EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/13 1:01 p.m.6 views

AZL-86658 CVE-2026-4873 affecting package curl for versions less than 8.11.1-7

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...

5.9CVSS6.7AI score0.00329EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.17 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.2 contained security vulnerabilities. These vulnerabilities stemmed from the acceptance of non-rotated plaintext ws:// gateway endpoints and the transmission of stored gateway...

5.9CVSS5.9AI score0.00116EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/17 7:30 p.m.58 views

CVE-2026-33569

The CVE-2026-33569 issue affects Anviz CX2 Lite and CX7 where administrative sessions run over HTTP, exposing credentials and session data to on‑path attackers. Affected component: administrative session handling over non-HTTPS connections; root cause: cleartext transmission of sensitive informat...

6.5CVSS5.8AI score0.00186EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/27 6:08 p.m.52 views

CVE-2026-27752 SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain...

8.2CVSS0.00193EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.14 views

PT-2026-6192

Name of the Vulnerable Software and Affected Versions Shenzhen Tenda AC7 firmware versions prior to V03.03.03.01 cn Description The firmware for Shenzhen Tenda AC7 devices up to version V03.03.03.01 cn reveals account credentials in plain text within HTTP responses. This allows an attacker...

8.2CVSS5.5AI score0.00207EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/01/13 10:54 p.m.9 views

CVE-2025-52435

J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange...

7.5CVSS6.9AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:38 a.m.17 views

CVE-1999-0727

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...

5CVSS6.7AI score0.00994EPSS
SaveExploits0References1
Rows per page
Query Builder