EUVD-2025-18203

Malicious code in bioql PyPI...

EUVD-2021-6936

Malicious code in bioql PyPI...

PT-2025-40013

Name of the Vulnerable Software and Affected Versions NiceHash QuickMiner version 6.12.0 Description The software updates are performed over HTTP without validating digital signatures or hash checks. An attacker intercepting or redirecting traffic to the update URL can hijack the update process a...

PARROT: Portable Android Reproducible Traffic Observation Tool

The rapid evolution of mobile security protocols and limited availability of current datasets constrains research in app traffic analysis. This paper presents PARROT, a reproducible and portable traffic capture system for systematic app traffic collection using Android Virtual Devices. The system...

CVE-2025-58126

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

CVE-2025-58123

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

CVE-2025-58127

CVE-2025-58127 concerns an improper certificate validation flaw in the Checkmk Exchange plugin for Dell PowerScale. The underlying issue is TLS/SSL certificate validation failure, which can allow an attacker in a network position to perform a Man-in-the-Middle (MitM) attack and intercept traffic....

CVE-2025-58126

CVE-2025-58126 affects the Checkmk Exchange plugin for VMware vSAN. The root cause is improper certificate validation (TLS/SSL) in the plugin, which permits a man-in-the-middle attacker to intercept traffic. Documented impact is exposure of communications in MitM scenarios; exploitation details a...

CVE-2025-58125

CVE-2025-58125 affects the Checkmk Exchange plugin Freebox v6 agent. The root cause is improper certificate validation, enabling attackers in a network MitM position to intercept traffic. Publicly provided documents consistently describe this flaw, with NVD and vendor/third-party feeds listing th...

CVE-2025-58124 Lack of TLS validation in plugin check-mk-api on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic...

CVE-2025-58123

CVE-2025-58123 affects the Checkmk Exchange plugin BGP Monitoring. The root cause is improper certificate validation, enabling MitM attackers to intercept traffic when positioned on the network. Documented sources confirm the vulnerability description but do not provide explicit affected versions...

PT-2025-35082

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin VMware vSAN affected versions not specified Description: The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM positi...

Checkmk Exchange plugin Freebox v6 agent 安全漏洞

Checkmk Exchange plugin Freebox v6 agent is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Freebox v6 agent that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

PT-2025-35081

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Freebox v6 agent affected versions not specified Description: The Checkmk Exchange plugin Freebox v6 agent contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM...

PT-2025-35083

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Dell Powerscale affected versions not specified Description: The Checkmk Exchange plugin for Dell Powerscale contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle Mit...

PT-2025-35079

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin versions affected versions not specified Description: Improper certificate validation in the Checkmk Exchange plugin’s BGP monitoring functionality allows attackers positioned in a man-in-the-middle MitM position to...

CVE-2025-20215 Cisco Webex Meeting Client Join Certificate Validation Vulnerability

A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user, provided the requisite conditions were satisfied. Cisco has addressed this...

CVE-2025-36106

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-53756

CVE-2025-53756 affects Digisol DG-GR6821AC Router. The issue is cleartext transmission of credentials in the web management interface, allowing a remote attacker to intercept network traffic and gain unauthorized access. CVSS 4.0 base score 8.7 (HIGH) with network access, low attack complexity, n...

CVE-2025-53756 Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...