CVE-2024-40508

CVE-2024-40508 openPetra v.2023.02 中通过 serverMConference.asmx 函数存在的跨站脚本（XSS）漏洞 描述 : 未经认证的用户可以通过利用 openPetra v.2023.02 中 serverMConference.asmx 函数的 XSS 漏洞，窃取已认证用户的 Cookie。 受影响产品版本 : openPetra v.2023.02 CVE 作者 : Jansen Moreira 日期 : 13/07/2024 CVE : CVE-2024-40508 CVE 链接 :...

CVE-2024-40506

CVE-2024-40506 openPetra v.2023.02 中的跨站脚本漏洞，存在于 serverMHospitality.asmx 函数中 描述 ：未认证用户可通过利用 openPetra v.2023.02 中 serverMHospitality.asmx 函数的 XSS 漏洞，窃取已认证用户的 cookie。 受影响产品版本 ：openPetra v.2023.02 CVE 作者 ：Jansen Moreira 日期 ：13/07/2024 CVE ：CVE-2024-40506 CVE 链接 ：https://vulners.com/cve/CVE-2024-4050...

CVE-2024-40510

CVE-2024-40510 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 a través de la función serverMCommon.asmx. Descripción : Un usuario no autenticado puede robar cookies de un usuario autenticado explotando un XSS en openPetra v.2023.02 a través de la función serverMCommon.asmx. Versión...

CVE-2025-26244

CVE-2025-26244-POC El código para explotar esta vulnerabilidad se puede ver en 'spoof.go'. Esto se hace pasar por un agente ante el servidor C2. Para ejecutar esta vulnerabilidad necesitamos conocer: 1. La dirección IP y el puerto del listener. 2. La clave pública del listener. 3. La URL del prim...

POC-CVE-2014-0166

CVE-2014-0166 的 POC&EXP WordPress 3.8.2 Cookie 伪造漏洞 此漏洞的详细信息可在此处找到 共有三个文件： wpzerocookiegenerator.php 用于验证此漏洞的 POC。 它不会 发送任何请求，只是一个本地暴力破解器。 重新定义变量以提供信息，它将尝试找出一个 zero cookie 。 zeroCatcher.py 用 python 编写的多进程 POC 与 wpzerocookiegenerator.php 相同。 不同之处在于应用了多进程以获得更好的性能。 cookieForger.py 多线程远程 EXP...

CVE-2026-82311

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compares the string identifier Flask-Login stores in the session against the user's integer database identifier, so the...

CVE-2026-82311

In apache-airflow-providers-fab , the FAB password-reset command fails to invalidate existing database-backed sessions because it compares the string _user_id stored by Flask-Login against the user's integer database identifier—a comparison that always evaluates to false. An attacker holding a st...

CVE-2026-27555

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/getioddportinfo endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-27556

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/saveioddparameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-27553

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2026-27556 Local File Inclusion in /index.php/ajax/save_iodd_parameters

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/saveioddparameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-27556

A local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint of a VDE (Verband der Elektrotechnik) device allows a low-privileged remote attacker with a valid operator cookie to execute arbitrary PHP code on the device. The CNA is cert.vde.com , and related advisories...

EUVD-2026-80239

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/saveioddparameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device...

EUVD-2026-80238

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/getioddportinfo endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-27555 Local File Inclusion in /index.php/ajax/get_iodd_port_info

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/getioddportinfo endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-85131

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts...

CVE-2026-85131

WPLP Cookie Consent (WordPress plugin, also known as WP Cookie Notice for GDPR, CCPA & ePrivacy Consent) versions before 4.4.4 are vulnerable to arbitrary post and page deletion via CSRF. The plugin fails to perform CSRF or capability checks when processing bulk actions on its administration scre...

EUVD-2026-80194

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts...

WordPress WPLP Cookie Consent plugin < 4.4.4 - Arbitrary Post Deletion vulnerability

Arbitrary Post Deletion vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.4...

CVE-2026-85131 WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts...