Fortinet FortiOS < 5.6.12 / 6.x < 6.0.8 Information Disclosure MitM (FG-IR-18-100)

The remote host is running a version of FortiOS prior to 5.6.12 or 6.x prior to 6.0.8. It is, therefore, affected by an information disclosure man-in-the-middle vulnerability in the FortiGuard services communication protocol due to the use of a hardcoded cryptographic key. A remote attacker with...

CVE-2018-9195

The CVE-2018-9195 entry describes an information-disclosure MITM vulnerability caused by a hardcoded cryptographic key used in the FortiGuard service communication protocol. Affected products include FortiOS 5.6.x (before 5.6.12) and FortiOS 6.x (before 6.0.8), and FortiClient clients (Windows be...

PT-2019-14701 · Jenkins · Jenkins Google Compute Engine Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Google Compute Engine Plugin versions 4.1.1 and earlier Description: The issue allows man-in-the-middle attacks due to the lack of SSH host key verification when connecting agents created by the plugin. This enables potential attacker...

Code injection

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

CVE-2019-15388

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service name...

CVE-2019-15344

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

Input validation

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service name...

CVE-2019-15389

The CVE-2019-15389 entry concerns Haier A6 devices running Haier/A6/A6:8.1.0 with a pre-installed platform app com.lovelyfont.defcontainer (FontCoverService) that is exported and can be controlled by any co-located app to execute commands as the system user. A secondary app, com.ekesoo.lovelyhifo...

CVE-2019-15389

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service named...

CVE-2019-15388

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service name...

CVE-2019-15388

CVE-2019-15388 affects Coolpad 1851 devices with Android 8.1.0 where a pre-installed platform app com.lovelyfont.defcontainer exposes an exported service FontCoverService that accepts arbitrary commands and runs them as the system user. The attack requires no privileges and can be triggered by a ...

CVE-2019-15344

CVE-2019-15344 affects the Tecno Camon iClick Android device. A pre-installed platform app with package name com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.8) exposes an exported service com.lovelyfont.manager.FontCoverService that allows any co-located app to send arbitrary commands...

CVE-2009-3552

In RHEV-M VDC 2.2.0, the SSL certificate validation was not performed when using the client-side Red Hat Enterprise Virtualization Manager interface (a WPF-based browser app) to connect to the manager. This allows a local-network attacker to conduct a man-in-the-middle, potentially fooling users ...

Amazon's Ring Video Doorbell Lets Attackers Steal Your Wi-Fi Password

Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon's Ring Video Doorbell Pro devices that could allow nearby attackers to steal your WiFi password and launch a variety of cyberattacks using MitM against other devices connected to the same network...

Junos OS: app-id Signature Update MitM (JSA10952)

According to its self-reported version number, the remote Juniper Junos device is affected by a weakness in the Application Identification app-id signature update client. This allows an unauthenticated, remote attacker to perform a Man-in-the-Middle MitM attack which can compromise the integrity...

Exploit for Improper Validation of Integrity Check Value in Oneidentity Cloud_Access_Manager

CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity ch...

CVE-2019-12855

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

Razer: Information disclosure at http://sea-s2s.molthailand.com/status.php

The tester discovered a Razer Gold TH server was transmitting sensitive information without proper encryption, leading to a potential MITM attack. Razer thanks the tester for his diligence and the clear report/PoC...

Tomedo Server 1.7.3 Information Disclosure / Weak Cryptography

Affected software: Tomedo Server 1.7.3 Vulnerability type: Cleartext Transmission of Sensitive Information & Weak Cryptography for Passwords Vulnerable version: Tomedo Server 1.7.3 Vulnerable component: Customer Tomedo Server that communicates with Vendor Tomedo Update Server Vendor report...