359 matches found
EUVD-2026-52637
The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...
CVE-2026-18753
CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...
CVE-2026-13385
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middleMITM user to make the router download and execute arbitrary command via a spoofed server. Refer to the ' Security Update for ASUS Router Firmware '...
CVE-2026-45501 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-41132
CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certificate e.g. self-signed, leaving credentials and all emails sent open to MITM attacks. This vulnerability is fixed in...
CVE-2026-41132
CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certificate e.g. self-signed, leaving credentials and all emails sent open to MITM attacks. This vulnerability is fixed in...
CVE-2026-41132
CVE-2026-41132 affects CKAN prior to versions 2.10.10 and 2.11.5, where the SMTP connection lacks certificate validation. This allows a MITM attacker to spoof the SMTP server and potentially access credentials and email contents. The issue is mitigated by upgrading CKAN to 2.10.10 or 2.11.5 (or n...
CVE-2019-11014
The VStarCam vstc.vscam.client library and vstc.vscam shared object, as used in the Eye4 application for Android, iOS, and Windows, do not prevent spoofing of the camera server. An attacker can create a fake camera server that listens for the client looking for a camera on the local network. When...
CVE-1999-0395
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server...
CVE-2025-64672 Microsoft SharePoint Server Spoofing Vulnerability
...
PT-2025-42130
Name of the Vulnerable Software and Affected Versions JDBC Driver for SQL Server affected versions not specified Description An improper input validation issue exists in the JDBC Driver for SQL Server. This allows an unauthorized attacker to perform spoofing attacks over a network. The issue...
EUVD-2013-4004
Malware in sbrugna...
EUVD-2014-7180
Malware in sbrugna...
EUVD-2014-7261
Malware in sbrugna...
EUVD-2009-2721
Malware in sbrugna...
EUVD-2012-5670
Malware in sbrugna...
EUVD-2009-3459
Malware in sbrugna...
EUVD-2011-0108
Malware in sbrugna...