EUVD-2025-209107

Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies o...

CVE-2025-10548

The CleverControl employee monitoring software (specifically version 11.5.1041.6 ) is vulnerable to a man-in-the-middle attack due to a failure to validate TLS server certificates during the installation process. The installer uses curl.exe --insecure to download and execute external components, ...

CVE-2025-10548 Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution

The CleverControl employee monitoring software v11.5.1041.6 fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker to deliver malicious files that are...

CVE-2025-5264

The Mozilla Firefox browser and Thunderbird email client are vulnerable to local code execution due to a flaw in the “Copy as cURL” feature. The root cause is the insufficient escaping of the newline character , which could allow an attacker to trick a user into executing unintended commands on t...

Vulnerability: ModernBill Insecure CURL Settings

Vulnerability: ModernBill Insecure CURL Settings Vulnerability discovered by: Justin Samuel www.justinsamuel.com Discovery Date: 2006-07-11 Severity: Less Critical Impact: Exposure of sensitive information Product: ModernBill Affected Versions: 5.0.1 Vendor: ModernGigabyte, LLC...