74 matches found
toxssin
toxssin 用途 toxssin 是一款开源渗透测试工具，用于自动化利用跨站脚本（XSS）漏洞的过程。它包含一个 HTTPS 服务器，该服务器作为恶意 JavaScript 载荷（toxin.js）所产生流量的解释器。 该项目最初（现在仍然是）一项基于研究的创意尝试，旨在探索 XSS 漏洞可能带来的利用深度，仅使用原生 JavaScript、受信任的证书和一些廉价技巧。 免责声明 ：在未经明确许可的情况下，使用本工具针对 Web 应用进行测试是违法的。您应对使用本工具可能引起的任何麻烦负责。 视频演示 https://www.youtube.com/watch?v=Z9I4UJUBr...
CVE-2026-22617
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
CVE-2026-22617
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
CVE-2026-22617
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
PT-2026-33259
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
Eaton Intelligent Power Protector 安全漏洞
Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from insecure cookie configurations. This vulnerability may allow network-based attackers to intercept...
CVE-2026-5119
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential...
CVE-2022-26157
An issue was discovered in the web application in Cherwell Service Management CSM 10.2.3. The ASP.NETSessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels...
EUVD-2016-0386
Malware in sbrugna...
EUVD-2014-0935
Malware in sbrugna...
EUVD-2015-3235
Malware in sbrugna...
EUVD-2020-25844
Malware in sbrugna...
EUVD-2010-5107
Malware in sbrugna...
EUVD-2011-4646
Malware in sbrugna...
EUVD-2016-9785
Malware in sbrugna...
EUVD-2015-2138
Malware in sbrugna...
EUVD-2014-0939
Malware in sbrugna...
EUVD-2022-30723
Malicious code in bioql PyPI...