WiFi-Pumpkin v0.8.7 - Framework for Rogue Wi-Fi Access Point Attack

The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...

openSUSE: Security Advisory for python-mitmproxy (openSUSE-SU-2018:2291-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mac malware intercepts encrypted web traffic for ad injection

Last week, Malwarebytes researcher Adam Thomas found an interesting new piece of Mac malware that exhibits some troubling behaviors, including intercepting encrypted web traffic to inject ads. Let's take a closer look at this adware, which Malwarebytes for Mac detects as OSX.SearchAwesome, to see...

Security update for python-mitmproxy (moderate)

This update for python-mitmproxy fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed: - Fixed a dependency issue with python-ldap3 boo1101457...

openSUSE Security Update : python-mitmproxy (openSUSE-2018-850)

This update for python-mitmproxy fixes the following issues : The following security vulnerability was fixed : - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed : - Fixed a dependency issue with python-ldap3 boo110145...

Mitmweb in mitmproxy allows DNS Rebinding attacks

mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py...

GHSA-6M53-C78Q-7QMG Mitmweb in mitmproxy allows DNS Rebinding attacks

mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py...

adaptdl-cli (>=0.2.2 <=0.2.11), agent-leash (>=0.3.0 <=0.8.0) +113 more potentially affected by CVE-2018-14505 via mitmproxy (>=10.1.5 <=4.0.3)

mitmproxy PYPI version =10.1.5, =0.2.2, =0.3.0, =0.4.0, =1.0.0, =0.1.1, =0.2.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.11, =1.0.5, =0.1.0, =0.2.0, =0.2.1 and more Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...

DNS Rebinding Attacks

mitmproxy is vulnerable to DNS rebinding attacks. The vulnerability exists due to the lack of enforcement of hostname matching, allowing DNS rebinding attacks...

Design/Logic Flaw

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

DEBIAN-CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

UBUNTU-CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

PYSEC-2018-56

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

PYSEC-2018-56

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

adaptdl-cli (>=0.2.2 <=0.2.11), agent-leash (>=0.3.0 <=0.8.0) +113 more potentially affected by CVE-2018-14505 via mitmproxy (>=10.1.5 <=4.0.3)

mitmproxy PYPI version =10.1.5, =0.2.2, =0.3.0, =0.4.0, =1.0.0, =0.1.1, =0.2.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.11, =1.0.5, =0.1.0, =0.2.0, =0.2.1 and more Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

CVE-2018-14505

CVE-2018-14505 affects mitmproxy’s mitmweb (v4.0.3) with DNS rebinding flaws in tools/web/app.py. Documented in multiple advisories (GHSA, OpenSUSE/NASL) as fixed in v4.0.4+; impact described as allowing DNS rebinding attacks. REMEDIATION: upgrade to mitmproxy ≥4.0.4 or apply vendor patches that ...