EUVD-2017-3316

Malware in sbrugna...

EUVD-2018-4235

Malware in sbrugna...

EUVD-2017-18182

Malware in sbrugna...

EUVD-2023-12886

Malicious code in bioql PyPI...

CVE-2023-0897

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests...

CVE-2023-0897 Session FIxation in Sielco PolyEco1000

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests...

CVE-2023-0897 Session FIxation in Sielco PolyEco1000

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests...

CVE-2023-0897: Session Fixation

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests...

PT-2021-12207

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue is caused by the lack of server hostname verification for SSL/TLS communication, allowing a remote attacker to obtain sensitive information by sending a specially-crafted request...

PT-2018-11081

Name of the Vulnerable Software and Affected Versions Momentum Axel 720P version 5.1.8 Description An issue allows authenticated custom firmware upgrade via DNS hijacking. An authenticated root user with CLI access can remotely upgrade firmware to a custom image due to a lack of SSL validation...

CVE-2017-11706: Exposure of Sensitive Information to an Unauthorized Actor

The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...

PT-2017-12192

Name of the Vulnerable Software and Affected Versions Boozt Fashion versions prior to 2.3.4 Description The issue allows remote attackers to read login credentials by sniffing the network due to the lack of SSL encryption. The vendor initially considered this an accepted risk, noting that only th...

PT-2017-18802

Name of the Vulnerable Software and Affected Versions Google News and Weather application versions prior to 3.3.1 Description The issue allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL. Recommendations For versions prior to 3.3.1, update to versi...

CVE-2017-9245: Exposure of Sensitive Information to an Unauthorized Actor

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

PT-2017-8679

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Pro versions prior to 2016-07-26 Description The issue concerns the lack of SSL pinning in the OSRAM SYLVANIA Osram Lightify Pro. This could potentially allow for man-in-the-middle attacks. Recommendations For OSR...

CVE-2015-7931: Improper Input Validation

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

PT-2014-3232

Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation firmware versions prior to 3949 Description The issue concerns the lack of SSL use for the distribution feed, allowing man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server...

CVE-2008-3747: Undefined Security Weakness

The 1 geteditpostlink and 2 geteditcommentlink functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie...