SSL/TLS Self-Signed Certificate

The remote server presents a self-signed SSL/TLS certificate not signed by a recognized certificate authority. If the remote host is a public host in production, this nullifies the use of SSL/TLS as anyone could establish a man-in-the-middle attack against the remote host. No source data...

VPNFilter Client Malicious Self-Signed Certificate

VPNFilter is multi-stage malware that infects certain routers. It uses a custom SSL certificate in order to download data required to proceed to the second stage of the infection. Successful exploitation may lead to the device being compromised...

IBM BigFix Remote Control Spoofing Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control version 9.1.2, which originates from the program allowing self-signed certificates. A remote attacker could exploit this vulnerability to conduc...

CVE-2015-4954

IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200...

Code injection

IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200...

CVE-2015-4954

IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200...

CVE-2015-4954

CVE-2015-4954 affects IBM BigFix Remote Control prior to the Interim Fix pack 9.1.2-TIV-IBRC912-IF0001, where the product improperly allows self-signed certificates. This certificate handling weakness could enable remote attackers to perform spoofing attacks via unspecified vectors. The vulnerabi...

CVE-2015-4954: Improper Certificate Validation

IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200...

CVE-2018-5466

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information...

CVE-2018-5466: Improper Certificate Validation

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information...

HPE iLO 4 < 2.53 - Add New Administrator User

!/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP: https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03769enus Other...

Microsoft Windows Rogue Root Certificate Authorities Detection

One or more dangerous self-signed certificates are present on the host machine. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Savitech driver packages for Windows man-in-the-middle attack vulnerability

Savitech driver packages for Windows is a driver package for signal processing chips based on the Windows platform. A security vulnerability exists in the Savitech driver packages for Windows-based platforms that originates when a program installs a self-signed certificate into the Trusted Root...

When you shouldn’t trust a trusted root certificate

Root certificates are the cornerstone of authentication and security in software and on the Internet. They're issued by a certified authority CA and, essentially, verify that the software/website owner is who they say they are. We have talked about certificates in general before, but a recent eve...

CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

Session fixation

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758: Improper Certificate Validation

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758

CVE-2017-9758 affects Savitech USB audio driver packages for Windows. Some driver installers silently install a root CA certificate (SaviAudio) into the Windows Trusted Root Certification Authorities store, creating a trust-anchor that can be abused for man-in-the-middle attacks. Impact reported ...

Inside the CCleaner Backdoor Attack

MADRID—As the investigation continues into the backdoor planted inside CCleaner, two members of parent company Avast’s threat intelligence team said today the desktop and cloud versions of the popular software contained different payloads. The revelation was made during a talk at Virus Bulletin...