4386 matches found
PYSEC-2017-85
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
CVE-2017-1000007
The CVE-2017-1000007 entry concerns txAWS (all current versions) failing to perform complete certificate verification, creating vulnerability to MitM attacks and information disclosure. The connected documents corroborate that the underlying issue is improper TLS/server-certificate validation in ...
CVE-2017-1000007
txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...
Samba Man in the Middle Security Bypass Vulnerability (Heimdal)
Samba is prone to a MITM authentication validation bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
samba -- Orpheus Lyre mutual authentication validation bypass
The samba project reports: A MITM attacker may impersonate a trusted server and thus gain elevated access to the domain by returning malicious replication or authorization data...
FreeBSD-SA-17:05.heimdal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-17:05.heimdal Security Advisory The FreeBSD Project Topic: heimdal KDC-REP service name validation vulnerability Category: contrib Module: heimdal Announced:...
Man-in-the-Middle (MitM)
ikst is vulnerable to resources downloaded through insecure protocol. The library downloads resources through HTTP, allowing a man-in-the-middle attack to tamper with the content in transit...
Man-in-the-Middle (MitM)
Moodle is vulnerable to man-in-the-middle MitM attacks. The repository/s3/S3.php does not verify that the host is secure before curling to it. This can allow a malicious user to conduct a MitM attack...
A Man-in-the-Middle Attack against a Password Reset System
This is nice work: "The Password Reset MitM Attack," by Nethanel Gelerntor, Senia Kalma, Bar Magnezi, and Hen Porcilan: Abstract: We present the password reset MitM PRMitM attack and show how it can be used to take over user accounts. The PRMitM attack exploits the similarity of the registration...
BestSafe Browser - MITM Remote Code Execution Vulnerability
Exploit for Android platform in category remote exploits Exploit Title: BestSafe Browser FREE NoAds - Remote Code Execution Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a1.bestsafebrowser.com Software Link: See APK archive websites Screenshot: Refer to...
DEBIAN-CVE-2017-10789
The DBD::mysql module through 4.043 for Perl uses the mysqlssl=1 setting to mean that SSL is optional even though this setting's documentation has a "your communication with the server will be encrypted" statement, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrad...
Design/Logic Flaw
A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 Java and OSCI Transport Library 1.6 .NET. Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the...
CVE-2017-10668
A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 Java and OSCI Transport Library 1.6 .NET. Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the...
CVE-2017-10668
A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 Java and OSCI Transport Library 1.6 .NET. Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the...
CVE-2017-10668
The CVE-2017-10668 issue is a Padding Oracle vulnerability in OSCI-Transport 1.2 as used by OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Under MITM conditions in the OSCI infrastructure, an attacker can send crafted protocol messages to analyze CBC padding and decryp...
BestSafe Browser - Man In The Middle Remote Code Execution
Exploit Title: BestSafe Browser FREE NoAds - Remote Code Execution Date: 30/Jun/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a1.bestsafebrowser.com Software Link: See APK archive websites Screenshot: Refer to https://www.youtube.com/watch?v=VXNVzjsH0As...
eVestigator Forensic PenTester - Man In The Middle Remote Code Execution
eVestigator Forensic PenTester - Man In The Middle Remote Code Execution Exploit Title: eVestigator Forensic PenTester v1 - Remote Code Execution via MITM Date: 30/Jun/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=penetrationtest.eVestigator.com Software...
eVestigator Forensic PenTester - Man In The Middle Remote Code Execution
Exploit Title: eVestigator Forensic PenTester v1 - Remote Code Execution via MITM Date: 30/Jun/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=penetrationtest.eVestigator.com Software Link: See APK archive websites Screenshot: Refer to...
CVE-2017-7520
CVE-2017-7520 affects OpenVPN versions prior to 2.4.3 and prior to 2.3.17, enabling denial-of-service and/or a potentially sensitive memory leak triggered by a man-in-the-middle attacker. The connected advisories and trackers confirm patches/update guidance to mitigate by upgrading OpenVPN to ver...
Gratipay: Possible User Session Hijack using Invalid HTTPS certificate on inside.gratipay.com domain
Good evening team! This is a theoretical risk but I thought it was still worth reporting since every endpoint and any data flowing through inside.gratipay.com is unencrypted. POC https://inside.gratipay.com And every sub directory under inside.gratipay.com. Description Since the certificate is on...