CVE-2026-48697

FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The executewebrequestsecure function in src/fastlibrary.cpp creates a boost::asio::ssl::context with tlsclient mode and calls setdefaultverifypaths to load CA certificates, but never calls...

EUVD-2022-35844

Malicious code in bioql PyPI...

CVE-2025-32407

The Samsung Internet for Galaxy Watch app (version 5.0.9 ) fails to properly validate TLS certificates, creating a critical misconfiguration where the browser does not verify if a certificate's domain matches the website's domain. This allows an attacker to impersonate any website, negating HTTPS...

CVE-2022-32778

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the...