Unprotected Alternate Channel

Overview repomix is an A tool to pack repository contents to single file for AI consumption Affected versions of this package are vulnerable to Unprotected Alternate Channel through the attachpackedoutput process. An attacker can access sensitive information from arbitrary local .json, .txt, .md,...

The vulnerability of LiteLLM’s proxy server, related to the use of an unprotected alternative channel, allows attackers to execute arbitrary code.

The vulnerability of the LiteLLM proxy server is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-40435: Unprotected Alternate Channel

When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Unprotected Alternate Channel

Overview Affected versions of this package are vulnerable to Unprotected Alternate Channel due to the omission of confirmation in proxy-mode multiplexing sessions. An attacker can cause unintended data handling by establishing a multiplexed session without explicit confirmation when specific and...

CVE-2025-56558: Unprotected Alternate Channel

The Dyson MQTT server 2022 and possibly later allows publications and subscriptions by a client that has the correct values of AWSACCESSKEYID, AWSSECRETACCESSKEY, AWSSESSIONTOKEN, and device serial number, even if a device such as a Pure Hot+Cool device has been removed and is not visible in the...

CVE-2025-59033: Unprotected Alternate Channel

The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...

Rockwell Automation Logix Controllers Unprotected Alternate Channel (CVE-2024-6242)

A vulnerability exists in the affected products that allows a threat actor to bypass the Trusted Slot feature in a ControlLogix controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device...

Rockwell Automation Logix Controllers

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix, GuardLogix, and 1756 ControlLogix I/O Modules Vulnerability : Unprotected Alternate Channel 2. RISK EVALUATION Successful exploitation of this...

Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity/known public exploitation Vendor : Rockwell Automation Equipment : Stratix 5800 and Stratix 5200 Vulnerabilities : Unprotected Alternate Channel, OS Command Injection 2. RISK EVALUATION Successful...

CVE-2023-31241: Unprotected Alternate Channel

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright...

CVE-2023-0317

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information...

CVE-2023-0317

CVE-2023-0317 affects Secomea GateManager. The vulnerability is described as an Unprotected Alternate Channel in the debug console that allows a system administrator to obtain sensitive information. The NVD entry lists a CVSS v3.1 base score of 4.9 (Medium) with Confidentiality Impact High and no...

Secomea GateManager has an unspecified vulnerability (CNVD-2022-38146)

Secomea GateManager is a remote access server product from the Danish company Secomea.A security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from an unprotected alternate channel vulnerability in the debug console. An attacker could use this vulnerability to...

CVE-2022-25786

GateManager exposes an unprotected alternate channel in its debug console that can disclose sensitive information. Affected product: GateManager, all versions prior to 9.7. Root cause: unprotected alternate channel in the debug console. Impact: confidentiality loss of information. Mitigation deta...

PT-2022-17513

Name of the Vulnerable Software and Affected Versions GateManager versions prior to 9.7 Description The issue is related to an Unprotected Alternate Channel vulnerability in the debug console of GateManager, allowing a system administrator to obtain sensitive information. Recommendations For...

CVE-2020-8558: Unprotected Alternate Channel

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally...