Lucene search
+L

117 matches found

Kitploit
Kitploit
•added 2026/10/07 4:53 a.m.•62 views

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

6.1AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/06 11:57 p.m.•16 views

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK”, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to protected information by intercepting network traffic.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...

5.9CVSS6.5AI score
SaveExploits0Affected Software1
CVE
CVE
•added 2026/10/02 12:15 a.m.•9 views

CVE-2026-103098

The GV-Eye software is vulnerable to sensitive information exposure due to the transmission of a sensitive key within the URL query parameter over an unencrypted HTTP connection. Because the request is sent in plaintext rather than via HTTPS, an attacker capable of monitoring network traffic can ...

7.5CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•8 views

PT-2026-104063

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A sensitive key is transmitted in the URL over an unencrypted HTTP connection. Because the request uses HTTP instead of HTTPS, the key is sent in plaintext acro...

7.5CVSS5.8AI score0.00161EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/20 7:16 p.m.•15 views

CVE-2026-19683

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

7.4CVSS0.0025EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•29 views

PT-2026-79104

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

6.3CVSS5.5AI score0.0025EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/17 9:29 p.m.•144 views

CVE-2026-65329

CVE-2026-65329 is an authentication issue within the Telephony component of iOS and iPadOS . The vulnerability stems from improper state management , which could allow an attacker in a privileged network position to bypass IPSec authentication and intercept network traffic . This issue is resolve...

5.9CVSS5.8AI score0.00242EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•25 views

Check Point Quantum Security Gateway和Check Point Spark Firewalls 信任管理问题漏洞

Check Point Quantum Security Gateway and Check Point Spark Firewalls are both products of Check Point, a company based in Israel. Check Point Quantum Security Gateway is a series of enterprise-level security gateway devices. Check Point Spark Firewalls are a series of security firewall devices...

7.4CVSS5.8AI score0.0026EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•29 views

GX Group Earth 2022 ONT 安全漏洞

GX Group Earth 2022 ONT is an FTTH optical network terminal device developed by the Turkish company GX Group. There is a security vulnerability present in GX Group Earth 2022 ONT. This vulnerability stems from the web management interface transmitting user credentials via HTTP plaintext...

8.7CVSS5.5AI score0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 12:32 a.m.•14 views

EUVD-2026-15143

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker in a privileged network position ma...

7.5CVSS5.8AI score0.00774EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/11 12:00 a.m.•3 views

CVE-2026-2368: Improper Certificate Validation

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code...

7.5CVSS6.6AI score0.00129EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•1 views

CVE-2026-20671: Improper Neutralization of Special Elements used in a Command

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to interce...

3.1CVSS5.8AI score0.00339EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:56 a.m.•20 views

CVE-2018-4069

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

7.5CVSS7.3AI score0.04065EPSS
SaveExploits3References1
OSV
OSV
•added 2025/11/24 5:16 p.m.•17 views

CVE-2025-63433

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata. The key is stored as a static value within the application's code. An attacker with the ability to intercept network traffic can use this hardcoded key to decrypt,...

4.6CVSS5.8AI score0.00192EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-7774

Malware in sbrugna...

6.5CVSS7.1AI score0.00718EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-12006

Malware in sbrugna...

9.6CVSS8.8AI score0.00556EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-2736

Malware in sbrugna...

7.5CVSS7.6AI score0.00713EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2016-3449

Malware in sbrugna...

5.9CVSS6.6AI score0.02411EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2020-18350

Malware in sbrugna...

3.5CVSS5.6AI score0.00251EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2021-6885

Malicious code in bioql PyPI...

9.9CVSS7.1AI score0.00941EPSS
SaveExploits0References1
Rows per page
Query Builder