Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests...
9.8CVSS7.3AI score0.00469EPSS
SaveExploits1References1
OSV•added 2016/03/14 1:59 a.m.•7 views
CVE-2016-1731
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream...
