Vulnerabilities
3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2025-56231 | Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections. Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections. NVD description · AI analysis pending | 9.1 | <1% | PoC |
| — | |
| CVE-2020-23060 +1 in the same advisory: …28964 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file. NVD description · AI analysis pending | 7.1 group max | <1% | PoC |
| — |