EUVD-2015-5787

Malware in sbrugna...

EUVD-2004-0870

Malware in sbrugna...

EUVD-2008-5092

Malware in sbrugna...

EUVD-2020-23257

Malware in sbrugna...

EUVD-2010-2298

Malware in sbrugna...

EUVD-2020-16373

Malware in sbrugna...

EUVD-2011-3936

Malware in sbrugna...

EUVD-2022-3855

Malicious code in bioql PyPI...

EUVD-2022-44204

Malicious code in bioql PyPI...

EUVD-2022-5845

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-5702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted...

CVE-2025-2611

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

EUVD-2025-23629

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

CVE-2025-2611

ICTBroadcast

NewStart CGSL MAIN 7.02 : curl Multiple Vulnerabilities (NS-SA-2025-0111)

The remote NewStart CGSL host, running version MAIN 7.02, has curl packages installed that are affected by multiple vulnerabilities: - CVE-2023-38546 is a cookie injection vulnerability in the curleasyduphandle, a function in libcurl that duplicates easy handles. When duplicating an easy handle, ...

TencentOS Server 3: curl (TSSA-2024:0097)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0097 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

CVE-2020-23630

A blind SQL injection vulnerability exists in zzcms ver201910 based on time cookie injection...

CVE-2008-3397

Cross-site scripting XSS vulnerability in Runesoft Cerberus CMS before 31.40.9 allows remote attackers to inject arbitrary web script or HTML via a cerberususer cookie...

Improper Domain Validation

org.apache.httpcomponents.client5, httpclient5 is vulnerable to improper domain validation. The vulnerability is due to disabled domain checks where a bug in the PSL validation logic, affecting cookie management and host name verification, which allows an attacker to perform cookie injection or...