335 matches found
Inveigh
Inveigh Inveigh 是一款面向渗透测试人员的跨平台 .NET IPv4/IPv6 中间人工具。此仓库包含主要的 C 版本以及旧版 PowerShell 版本。 概述 Inveigh 通过数据包嗅探和基于协议特定的监听器/套接字来执行欺骗攻击以及哈希/凭据捕获。数据包嗅探方法（最初版本 PowerShell 版工具的基础）具有以下优势： 通过 Windows SMB 服务捕获 SMB NTLM 挑战/响应 主机系统上可见端口绑定更少 主要缺点是需要提升的访问权限。 在当今版本的 Windows 上，默认运行的 UDP 服务允许端口复用。因此，数据包嗅探不再具有绕过正在使用的 U...
CVE-2026-20354: Improper Validation of Integrity Check Value
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...
CVE-2026-20355: Insufficient Verification of Data Authenticity
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...
CVE-2026-45745: Improper Certificate Validation
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop Electron disables TLS certificate validation, allowing a machine-in-the-middle attacker to intercept and modify HTTPS traffic to the configured...
CVE-2026-23810: Channel Accessible by Non-Endpoint
A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-Fi frame that causes an Access Point AP to classify the frame as group-addressed traffic and re-encrypt it using the Group Temporal Key GTK associated with the victim's BSSID...
CVE-2026-23812: Channel Accessible by Non-Endpoint
A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or...
CVE-2026-23811: Channel Accessible by Non-Endpoint
A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 L2 communication restrictions between clients and redirect traffic at Layer 3 L3. In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable...
Security Bulletin: Vulnerability in openssh and libssh libraries (CVE-2023-28709) affects Power HMC
Summary The openssh and libssh libraries are used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: OpenSSH is vulnerable to a machine-in-the-middle attack, caused by a flaw in the extension negotiation process ...
EUVD-2021-24870
Malware in sbrugna...
RLSA-2025:6993 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled CVE-2025-26465 For more...
EUVD-2024-46511
Malicious code in bioql PyPI...
EUVD-2023-45283
Malicious code in bioql PyPI...
EUVD-2025-18743
Malicious code in bioql PyPI...
EUVD-2025-18755
Malicious code in bioql PyPI...
EUVD-2022-31730
Malicious code in bioql PyPI...
EUVD-2023-35790
Malicious code in bioql PyPI...
EUVD-2025-16891
Malicious code in bioql PyPI...
EUVD-2025-4555
Malicious code in bioql PyPI...