EUVD-2025-208269

The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive...

CVE-2025-40896

The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive...

SolaX Power Pocket 安全漏洞

SolaX Power Pocket is a monitoring data collection tool developed by SolaX Energy in China. There is a security vulnerability in SolaX Power Pocket, which stems from the lack of server certificate verification when connecting to the SolaX Cloud MQTTS server. This vulnerability could allow a...

CVE-2020-24560

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 v15 consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one...

CVE-2023-45613

In JetBrains Ktor before 2.3.5 server certificates were not verified...

CVE-2025-12553

CVE-2025-12553 affects Azure Access Technology BLU-IC2 and BLU-IC4 (through 1.19.5). The vulnerability comes from disabled email server certificate verification, enabling potential MITM exposure. Affected versions: BLU-IC2 and BLU-IC4 up to 1.19.5. The PT-2025-44648 note provides practical remedi...

CVE-2025-12553 Server Certificate Verification Disabled

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12553 Server Certificate Verification Disabled

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2021-24193

Malware in sbrugna...

EUVD-2018-8041

Malware in sbrugna...

EUVD-2021-26783

Malware in sbrugna...

EUVD-2021-0029

Malware in sbrugna...

EUVD-2021-27130

Malware in sbrugna...

EUVD-2016-3153

Malware in sbrugna...

EUVD-2018-8033

Malware in sbrugna...

EUVD-2022-37171

Malicious code in bioql PyPI...

EUVD-2023-33068

Malicious code in bioql PyPI...

EUVD-2022-6112

Malicious code in bioql PyPI...

CVE-2024-27440

The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2023-22367

Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack...