CVE-2023-39458

Triangle MicroWorks SCADA Data Gateway contains a hard-coded default SSL certificate, allowing authentication bypass for network-adjacent attackers. The flaw is in certificate handling, enabling bypass of authentication on affected installations without required user interaction. Documents consis...

(0Day) Microsoft Azure Machine Learning Compute Instance certificate Exposure of Resource to Wrong Sphere Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on Microsoft Azure. An attacker must first obtain the ability to execute high-privileged code on the target environment in order to exploit this vulnerability. The specific flaw exists within the handling of certificates...

(Pwn2Own) Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of certificates. The service uses a...

Opera 'X.509' Certificates Spoofing Vulnerability (Linux)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnlin.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone Network...