Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/07/19 7:45 p.m.40 views

CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS0.0027EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/07/19 7:45 p.m.17 views

CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...

6.3CVSS6.8AI score0.0027EPSS
SaveExploits0References3
CVE
CVE
added 2024/07/19 7:45 p.m.78 views

CVE-2024-41124

CVE-2024-41124 affects the Puncia CLI (Official CLI for Subdomain Center & Exploit Observer) where API_URLS communicated over HTTP instead of HTTPS. Root cause: cleartext transmission enabling eavesdropping, data tampering, unauthorized data access, and MITM risks. The issue is mitigated in relea...

6.3CVSS6.3AI score0.0027EPSS
SaveExploits0References3
Rows per page
Query Builder