Tonec Internet Download Manager 安全漏洞

Tonec Internet Download Manager is a download manager from the Russian company Tonec. A security vulnerability exists in Tonec Internet Download Manager 6.42.41.1 and earlier versions, which stems from a lack of SSL certificate validation and may result in bypassing update protection...

EUVD-2025-37933

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

CVE-2025-56231

Tonec Internet Download Manager (IDM) 6.42.41.1 and earlier is affected by a Missing SSL Certificate Validation vulnerability in the update mechanism, allowing a remote attacker to bypass update protections. Affected component is the update/SSL validation routine; root cause details are consisten...

EUVD-2025-37923

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

CVE-2025-56230

Product affected: Tencent Docs Desktop (versions 3.9.20 and earlier). Vulnerability: Missing SSL certificate validation in the update component. Impact: security risk during update (described as lack of SSL certificate validation). Remediation: update to a version later than 3.9.20 (per PT securi...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

PT-2025-45051

Name of the Vulnerable Software and Affected Versions Tencent Docs Desktop versions 3.9.20 and earlier Description The update component in Tencent Docs Desktop does not properly validate SSL certificates. This could allow for potential security risks during the update process. Recommendations...

Tencent Docs Desktop 安全漏洞

Tencent Docs Desktop is a multiplayer online collaborative document tool from Tencent China. A security vulnerability exists in Tencent Docs Desktop 3.9.20 and prior versions, which stems from a lack of SSL certificate validation in the update component...

Exposure of Sensitive Information

Overview zpdatafetch is an A package for fetching data from Zwiftpower and Zwiftracing.app Affected versions of this package are vulnerable to Exposure of Sensitive Information via several improper security practices, including logging of credentials in stdout, a lack of certificated validation,...

Improper Certificate Validation

Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to TLS certificate verification being disabled in HTTP clients, which allows an attacker to perform a man-in-the-middle attack and supply invalid data, leading to denial of service and file integrity issues...

Improper Certificate Validation

KubernetesClient is vulnerable to Improper Certificate Validation. The vulnerability is due to inadequate verification of the certificate trust chain, which allows an attacker to present a forged certificate and perform man-in-the-middle attacks or impersonate the Kubernetes API server...

Panic when validating certificates with DSA public keys in crypto/x509

...

Quadratic complexity when checking name constraints in crypto/x509

...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from disabling email server...

Improper Certificate Validation

Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to the Manager’s Certificate gRPC service not verifying whether the requested IP addresses belong to the requesting peer, which allows an attacker to obtain valid TLS certificates for arbitrary IP addresses and...

EUVD-2025-36732

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

AZL-69146 CVE-2025-58188 affecting package msft-golang 1.24.13-1

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...