The vulnerability of the update checking function in Nagios XI monitoring tools allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the update checking function in the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2022-31941

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

CVE-2021-41067

An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of software updates with a /check-update HTTP-based connection. This can be exploited with MITM techniques. Together with the lack of package validation, it can lead to manipulation o...

Man-in-the-middle attack vulnerability in the latest version of Zhihu's Android client

Zhihu Android client is an online question and answer platform designed for Android users. The latest version of Zhihu's Android client has a security vulnerability in the "Check for Updates" function, which allows attackers to exploit the vulnerability to download malicious programs that cause...