CVE-2025-67229

ToDesktop Builder version 0.32.1 is susceptible to an improper certificate validation vulnerability. Due to insufficient certificate verification, an unauthenticated, on-path attacker can spoof backend responses. While exploitation details and specific exploit links are not provided, the vulnerab...

PT-2025-7413

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0 Description The issue allows an authenticated user to manipulate data in the Questionnaires application, enabling them to spoof other users' responses. Recommendations For versions 8.3 and 9.0...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This is because the DNS client implementation in the JNDI component of OpenJDK does not use random source ports when sending out DNS queries. A remote attacker coud spoof responses to those queries resulting in unauthorized...

PT-2016-3872

Name of the Vulnerable Software and Affected Versions Huawei Mobile WiFi E5151 versions before E5151s-2TCPU-V200R001B146D27SP00C00 Huawei Mobile WiFi E5186 versions before V200R001B310D01SP00C00 Description The issue allows remote attackers to spoof responses via unspecified vectors, making it...

CVE-2015-7282

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

Design/Logic Flaw

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

CVE-2015-5987: Undefined Security Weakness

Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...

CVE-2015-8262: Undefined Security Weakness

Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...