4351 matches found
Audi Travel App has a Bursting Vulnerability
Audi Travel App is a travel service software. Audi Travel APP is vulnerable to a blasting vulnerability. An attacker can log in to any user account and perform unauthorized operations by grabbing packets and bursting them...
Unspecified Vulnerability in TitanHQ WebTitan Gateway
TitanHQ WebTitan Gateway is a scalable web filtering appliance. The appliance is used to filter malware, ransomware botnets, malicious websites and more. A security vulnerability exists in TitanHQ WebTitan Gateway that stems from the program failing to properly validate certificates for the TLS...
Mac OS X libxpc MITM Privilege Escalation
This module exploits a vulnerablity in libxpc on macOS use exploit/osx/local/libxpc/mitmssudo msf undefinedmitmssudo show actions ...actions... msf undefinedmitmssudo set ACTION msf undefinedmitmssudo show options ...show and set options... msf undefinedmitmssudo run This module requires...
CVE-2017-18227
TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...
Information disclosure
TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...
CVE-2017-18227
TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...
CVE-2017-18227
TitanHQ WebTitan Gateway has an incorrect certificate validation in its TLS interception feature, as described by CVE-2017-18227. The vulnerability relates to improper certificate handling within the TLS interception functionality of WebTitan Gateway. Connected documents corroborate the issue, bu...
PT-2018-6754
Name of the Vulnerable Software and Affected Versions: TitanHQ WebTitan Gateway affected versions not specified Description: The issue concerns incorrect certificate validation for the TLS interception feature. Recommendations: At the moment, there is no information about a newer version that...
CVE-2017-18227: Improper Certificate Validation
TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...
New FlawedAmmyy RAT steals data and intercepts audio chat
By Waqas The FlawedAmmyy RAT has been developed using the leaked source This is a post from HackRead.com Read the original post: New FlawedAmmyy RAT steals data and intercepts audio chat...
CMS Made Simple 2.1.6 Remote Code Execution
Exploit Title: CMS Made Simple 2.1.6 - Remote Code Execution Date: 2018-02-26 Exploit Author: Keerati T. Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/13570/cmsms-2.1.6-install.zip Version: 2.1.6 CVE: CVE-2018-7448 Tested on: Linux...
Free and Open Source Interactive HTTPS Proxy: mitmproxy
mitmproxy is your swiss-army knife for debugging, testing, privacy measurements, and penetration testing. It can be used to intercept, inspect, modify and replay web traffic such as HTTP/1, HTTP/2, WebSockets, or any other SSL/TLS-protected protocols. You can prettify and decode a variety of...
CVE-2016-0351
IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. IBM X-Force ID:...
CVE-2016-0351
IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. IBM X-Force ID:...
PT-2018-4619
Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Virtual Appliance versions 7.0.x before 7.0.1.3-ISS-SIM-IF0001 Description The issue makes it easier for remote attackers to capture session cookies by intercepting their transmission within an HTTP session, as th...
Vend VDP: Improper access control on adding a Register to an Outlet
Summary: User without permissions to add a Register to an Outlet can bypass this restriction and add a Register to an Outlet. Description: I do not know which permission exactly controls this action, I tested this against default Cashier role. User with default Cashier role has no permission to a...
chrome:Persistent UXSS via SchemaRegistry(CVE-2016-1676)
Chrome version: 50.0.2661.75 and still present on current HEAD, 52.0.2713.0 The SchemaRegistry stores extension API schemas in a single v8::Context that lives until the RenderThread =process? is destroyed. Due to vulnerabilities in binding.js, these objects can be intercepted by malicious web...
General Motors and Shanghai OnStar iOS Client Man-in-the-Middle Attack Vulnerability
General Motors GM and Shanghai OnStar SOS iOS Client is an iOS-based application for making SOS distress calls for drivers in the event of a motor vehicle collision. A security vulnerability exists in the GM and SOS iOS Client version 7.1. The vulnerability can be exploited by an attacker to...
Design/Logic Flaw
A Man-in-the-Middle issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server...
CVE-2017-12697
A Man-in-the-Middle issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server...