Efe Kirbaş

Improper certificate validation in the platform allows an Adversary in the Middle (AiTM) attack, where an attacker can intercept or modify communications between two parties.

A key exchange without entity authentication issue allows an Adversary in the Middle (AiTM) attack. This occurs when the system fails to properly verify the identity of the communicating party during the initial key exchange process, enabling an attacker to intercept or manipulate the encrypted communication.

Improper certificate validation in the Liman Render Engine allows an Adversary in the Middle (AiTM) attack. This occurs because TLS certificate validation is disabled for Keycloak connections.

The PayTR Virtual Pos iFrame API WHMCS Module contains a flaw involving the use of a less trusted source, which allows for the exploitation of trusted identifiers.

Improper validation of the specified quantity in the input allows for input data manipulation within the PayTR Virtual Pos iFrame API WHMCS Module.

An observable timing discrepancy exists in the PayTR Virtual Pos iFrame API WHMCS Module. This flaw allows for Black Box Reverse Engineering, a technique used to deduce the internal logic of a system by analyzing the time it takes to process different inputs.