7 matches found
EUVD-2025-30869
Malicious code in bioql PyPI...
CVE-2025-10548
The CleverControl employee monitoring software v11.5.1041.6 fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker to deliver malicious files that are...
CVE-2025-10548
The CleverControl employee monitoring software v11.5.1041.6 fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker to deliver malicious files that are...
CVE-2025-10548 Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution
The CleverControl employee monitoring software v11.5.1041.6 fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker to deliver malicious files that are...
CVE-2025-10548 Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution
The CleverControl employee monitoring software v11.5.1041.6 fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker to deliver malicious files that are...
CleverControl 安全漏洞
CleverControl is an employee computer monitoring software from CleverControl USA. A security vulnerability exists in CleverControl version 11.5.1041.6, which stems from a failure to validate TLS server certificates during installation, and could lead to man-in-the-middle attacks and remote code...
PT-2025-39149
Name of the Vulnerable Software and Affected Versions CleverControl versions prior to 11.5.1041.6 Description The software does not validate TLS server certificates during installation. The installer uses curl.exe --insecure to download and execute external components, allowing a man-in-the-middl...