Monthly
Root-level remote code execution in HPE Analytics and Location Engine (ALE) can be achieved when an attacker first establishes a man-in-the-middle position on the network path to the appliance's administrative component and an administrator then interacts with that component. The CVSS 7.1 vector (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms that no authentication is needed once the MitM and user-interaction preconditions are met, and successful exploitation grants root privileges. No public exploit code has been identified at time of analysis, and the provided data does not specify a patched version.
Man-in-the-middle attack against Ghost Robotics Vision 60 robot firmware v5.5.0 allows local network attackers to intercept and manipulate communications, disconnect legitimate operators, and take unauthorized control of the quadruped robot, completely compromising confidentiality, integrity, and availability of operations. No active exploitation has been reported in CISA KEV, and no public exploit code was identified at time of analysis.
Man-in-the-middle tampering with the Automatic Update channel in Zhonglun CloudPOS 3.0 lets an unauthenticated attacker who holds a non-endpoint position on the network path manipulate the version, url, packagekey and package-name arguments processed in Program.cs, potentially steering or altering the update flow. Exploitation requires no authentication and no user interaction, but VulDB rates the attack as highly complex and the practical difficulty of occupying the required interception position keeps the overall priority low, with only low confidentiality, integrity and availability impact. Publicly available exploit code exists (a proof-of-concept document is linked from the VulDB record), the issue is not listed in CISA KEV so there is no confirmation of active exploitation, and the vendor was contacted early but did not respond.
Man-in-the-middle interception in CTFd v3.7.6, a widely-used Capture The Flag competition platform, exposes high-confidentiality data to adjacent-network attackers with no authentication required. Rooted in CWE-300 (Channel Accessible by Non-Endpoint), the flaw allows an attacker sharing the same network segment to intercept communications, capturing sensitive data such as session tokens or credentials, with limited integrity modification also possible. No active exploitation is confirmed - EPSS sits at 0.15% (4th percentile) and no CISA KEV listing exists - but the attack surface is acutely relevant in live CTF event environments where competitors and organizers routinely share the same LAN or Wi-Fi.
ArubaOS access points are vulnerable to gateway impersonation attacks when clients connect via wired or wireless interfaces, allowing unauthenticated attackers to redirect network traffic into a man-in-the-middle position. An attacker can exploit address-based spoofing to intercept or modify data streams intended for the legitimate gateway, compromising the confidentiality of client communications. No patch is currently available.
Arubaos contains a vulnerability that allows attackers to bypass Layer 2 (L2) communication restrictions between clients and redirect traf (CVSS 4.3).
Arubaos contains a vulnerability that allows attackers to redirect intercepted traffic to facilitate machine-in-the-middle (MitM) attacks (CVSS 4.3).
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.
LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.
A security vulnerability in Fortinet FortiOS (CVSS 5.9) that allows an unauthenticated attacker with the knowledge of device specific data. Remediation should follow standard vulnerability management procedures.
Root-level remote code execution in HPE Analytics and Location Engine (ALE) can be achieved when an attacker first establishes a man-in-the-middle position on the network path to the appliance's administrative component and an administrator then interacts with that component. The CVSS 7.1 vector (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms that no authentication is needed once the MitM and user-interaction preconditions are met, and successful exploitation grants root privileges. No public exploit code has been identified at time of analysis, and the provided data does not specify a patched version.
Man-in-the-middle attack against Ghost Robotics Vision 60 robot firmware v5.5.0 allows local network attackers to intercept and manipulate communications, disconnect legitimate operators, and take unauthorized control of the quadruped robot, completely compromising confidentiality, integrity, and availability of operations. No active exploitation has been reported in CISA KEV, and no public exploit code was identified at time of analysis.
Man-in-the-middle tampering with the Automatic Update channel in Zhonglun CloudPOS 3.0 lets an unauthenticated attacker who holds a non-endpoint position on the network path manipulate the version, url, packagekey and package-name arguments processed in Program.cs, potentially steering or altering the update flow. Exploitation requires no authentication and no user interaction, but VulDB rates the attack as highly complex and the practical difficulty of occupying the required interception position keeps the overall priority low, with only low confidentiality, integrity and availability impact. Publicly available exploit code exists (a proof-of-concept document is linked from the VulDB record), the issue is not listed in CISA KEV so there is no confirmation of active exploitation, and the vendor was contacted early but did not respond.
Man-in-the-middle interception in CTFd v3.7.6, a widely-used Capture The Flag competition platform, exposes high-confidentiality data to adjacent-network attackers with no authentication required. Rooted in CWE-300 (Channel Accessible by Non-Endpoint), the flaw allows an attacker sharing the same network segment to intercept communications, capturing sensitive data such as session tokens or credentials, with limited integrity modification also possible. No active exploitation is confirmed - EPSS sits at 0.15% (4th percentile) and no CISA KEV listing exists - but the attack surface is acutely relevant in live CTF event environments where competitors and organizers routinely share the same LAN or Wi-Fi.
ArubaOS access points are vulnerable to gateway impersonation attacks when clients connect via wired or wireless interfaces, allowing unauthenticated attackers to redirect network traffic into a man-in-the-middle position. An attacker can exploit address-based spoofing to intercept or modify data streams intended for the legitimate gateway, compromising the confidentiality of client communications. No patch is currently available.
Arubaos contains a vulnerability that allows attackers to bypass Layer 2 (L2) communication restrictions between clients and redirect traf (CVSS 4.3).
Arubaos contains a vulnerability that allows attackers to redirect intercepted traffic to facilitate machine-in-the-middle (MitM) attacks (CVSS 4.3).
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.
LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.
A security vulnerability in Fortinet FortiOS (CVSS 5.9) that allows an unauthenticated attacker with the knowledge of device specific data. Remediation should follow standard vulnerability management procedures.