7668 matches found
CVE-2024-7402
creationtimestamp| type| source ---|---|--- 2025-08-14 07:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwds5ix2zx2g...
CVE-2025-54809
F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-4410
creationtimestamp| type| source ---|---|--- 2025-08-13 05:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwb4vtqwsi2s...
CVE-2025-43735
creationtimestamp| type| source ---|---|--- 2025-08-12 15:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw7oab67qq2z...
CVE-2025-8081
creationtimestamp| type| source ---|---|--- 2025-08-12 08:29:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6versg6n2p 2025-10-17 12:59:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/55853 2025-10-17 21:00:04+00:00| published-proof-of-concept|...
CVE-2025-8568
creationtimestamp| type| source ---|---|--- 2025-08-12 04:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6h7fdfz32z...
CVE-2025-53188
creationtimestamp| type| source ---|---|--- 2025-08-11 21:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw5s5lbhcs2p...
Linux Distros Unpatched Vulnerability : CVE-2022-31043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Guzzle is an open source PHP HTTP client. In affected versions Authorization headers on requests are sensitive information. On making a request using the https...
CVE-2025-8810
creationtimestamp| type| source ---|---|--- 2025-08-10 18:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw2uq6tiuf2z 2025-08-11 15:39:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...
CVE-2025-46659
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HTTPS request...
SUSE CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
DEBIAN-CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
UBUNTU-CVE-2025-54799
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
Cleartext Transmission of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Transmission of Sensitive Information due to the lack of HTTPS enforcement for the ACME client. An attacker can intercept sensitive information by capturing unencrypted network traffic if the library user accidentally inputs a...
CVE-2025-54799 Lego does not enforce HTTPS
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799
CVE-2025-54799 affects the Lets Encrypt Go-based client and the lego v4/acme/api package. In 4.25.1 and earlier, the library does not enforce HTTPS when the ACME client communicates with CAs, applying to both the initial discover URL and the URLs returned in directory/order objects. If an HTTP UR...
CVE-2025-54799 Lego does not enforce HTTPS
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
CVE-2025-54799 Lego does not enforce HTTPS
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...