32403 matches found
Astra Linux – Vulnerability in curl
When curl is used to retrieve and parse cookies from an HTTPS server, it accepts cookies using control codes that, when sent back to an HTTP server later, may cause the server to return 400 responses. This effectively allows a “sister site” to deny service to all other sibling sites...
Astra Linux – Vulnerability in symfony
Symfony is a PHP framework for web and console applications, along with a set of reusable PHP components. The Symfony HTTP cache system functions as a reverse proxy: it caches entire responses including headers and returns them to clients. In a recent change to the AbstractSessionListener,...
Astra Linux – Vulnerability in WebKit2GTK
A cookie management issue has been resolved through improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information...
Astra Linux – Vulnerability in python-tornado
Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in th...
Astra Linux – Vulnerability in Python-Werkzeug
Werkzeug is a comprehensive WSGI web application library. Browsers may allow “nameless” cookies that look like =value instead of key=value. A vulnerable browser may allow a compromised application on a neighboring subdomain to exploit this to set a cookie like =Host-test=bad for another subdomain...
Astra Linux – Vulnerability in Zabbix
A authenticated user can create a hosts group using the configuration with XSS payload, which will be available to other users. When XSS is stored by an authenticated malicious actor, and other users attempt to search for groups during the creation of new hosts, the XSS payload will activate,...
Astra Linux – Vulnerability in python-urllib3
urllib3 is a user-friendly HTTP client library for Python. urllib3 does not treat the Cookie HTTP header specially or provides any helpers for managing cookies over HTTP; that responsibility lies with the user. However, it is possible for a user to specify a Cookie header, and information may be...
Astra Linux – Vulnerability in Zabbix
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the specific user...
pwn-pulse
pwn-pulse.sh Pulse Connect Secure SSL VPN 임의 파일 읽기 취약점CVE-2019-11510에 대한 익스플로잇 스크립트 작성자: braindead @BishopFox. Orange Tsai와 Meh Chang의 연구를 기반으로 합니다. 추가 통찰력을 제공한 Alyssa Herrera와 0xDezzy에게도 감사드립니다. 코드를 수정, 정리 및 크게 리팩토링한 bl4ckh0l3z에게 큰 감사를 드립니다! 이 스크립트는 CVE-2019-11510을 통해 다운로드된 Pulse Connect Secure...
CVE-2026-90708
A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulation of the argument yot3user/yot3pass causes sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2026-90708
Yot CMS versions up to 3.3.1 contain a SQL injection vulnerability in the Login function within the Cookie Handler component (file: global.php ). An attacker can manipulate the yot3_user and yot3_pass arguments to inject SQL, enabling remote exploitation without authentication or user interaction...
EUVD-2026-77384
A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulation of the argument yot3user/yot3pass causes sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2026-90708 Yot CMS Cookie global.php login sql injection
A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulation of the argument yot3user/yot3pass causes sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2021-46067
CVE-2021-46067 익스플로잇 제목: Vehicle Service Management System - '다중Multiple' 쿠키 탈취로 인한 전체 계정 탈취 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 치명적Critical 참고 자료: https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover...
poisontap
PoisonTap - 잠긴 컴퓨터에서 쿠키를 빼내고, 내부 라우터를 노출하며, 웹 백도어를 설치합니다 제작: @SamyKamkar || https://samy.pl 잠겨 있거나 비밀번호로 보호된 컴퓨터에 PoisonTap Raspberry Pi Zero 및 Node.js을 연결하면 다음과 같은 동작을 수행합니다: USB또는 Thunderbolt를 통해 이더넷 장치를 에뮬레이션합니다 낮은 우선순위/알려지지 않은 네트워크 인터페이스임에도 불구하고 머신의 모든 인터넷 트래픽 을 하이재킹합니다 Alexa 상위 1,000,000개...
CodeIgniterXor
CodeIgniterXor PoC 스크립트로, xorencode 메서드를 사용하는 CodeIgniter = 2.1.4 세션 쿠키를 디코딩합니다. 전체 세부 사항은 다음 블로그 게시물에서 확인할 수 있습니다: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability 사용법 break.py 이것은 메인 스크립트이며, 대상 URI가 주어지면 쿠키를 획득하고 세션 키를 무차별 대입brute force 시도합니다. 이 스크립트가 쿠키를 찾았지만 복호화에 실패하면 서...
CVE-2026-74252
쿠키 필터 우회를 통한 J2Commerce 게스트 체크아웃 저장형 XSS J2Commerce comj2store ≤ 4.1.5 — 인증되지 않은 공격자가 XSS 페이로드를 저장하며, 페이지 로드 시 관리자 브라우저에서 자동으로 실행됨 요약 J2Commerce 4.1.5는 게스트 체크아웃 청구 주소 필드를 통한 저장형 크로스 사이트 스크립팅Stored XSS 취약점에 영향을 받습니다. 인증되지 않은 공격자는 Joomla의 Input::getArray와 PHP의 variablesorder=EGPCS$REQUEST에서 쿠키가 POS...
CVE-2026-0257
🚨 CVE-2026-0257 – PAN-OS GlobalProtect 認証バイパス CVE-2026-0257 に関するセキュリティ調査、技術分析、検出ガイダンス、IOC 収集、および防御検証リソース。 📌 概要 CVE-2026-0257 は、特定の構成下で脆弱な PAN-OS バージョンを実行している Palo Alto Networks GlobalProtect Portal および Gateway の展開に影響を与える認証バイパスの脆弱性です。 この脆弱性は、Authentication Override...
CVE-2025-63498
Stored XSS in cookie Alinto/SOGo 연구자: Daniil Khomichenok, Alexander Klimenko 영향을 받는 버전 var cookieUsername = "[email protected]'123'"; var language = 'English'; var loginHint = '' XSS 인젝션을 매개변수 값으로 허용하는 로그인 기억 설정 쿠키 코드: root@kitploit: if rememberLogin response addCookie: self...