CVE-2024-3400-poc

CVE-2024-3400 漏洞 PoC（验证工具） 漏洞描述 CVE-2024-3400 是一个存在于 Palo Alto 防火墙系统中的命令注入漏洞。攻击者通过精心构造的 HTTP 请求，能够在目标服务器上执行恶意命令，甚至获取 root 权限。 漏洞复现步骤 1. 发送以下 HTTP 请求： POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt;...

CVE-2017-14322

CVE-2017-14322 Interspire Email Marketer emailmarketer 漏洞利用 Google Dork intitle:"Control Panel" + emailmarketer 使用 Burp Suit 进行漏洞利用 为请求头添加一个 Match 和 Replace 规则，如下所示： Match: ^Cookie.$ Replace: Cookie:...

CVE-2024-52475

CVE-2024-52475 WordPress Wawp 插件 = 3.0.17 存在认证绕过漏洞（账户接管） 免责声明！ 本文档中提供的有关 CVE-2024-52475 的信息仅供学习和教育目的使用。我们不鼓励也不授权将本信息用于任何有害目的，包括但不限于漏洞利用、系统篡改或其他非法活动。 我们强调在探索和理解安全漏洞时必须遵循道德规范。请记住，使用这些信息时应保持负责任的态度，并遵守适用法律。因使用此信息而采取的任何行动均由用户自行承担全部责任。 使用本材料即表示您同意不滥用所提供的信息，并对因使用此类信息而可能产生的任何后果承担全部责任。 简介 在浏览了与该 CVE...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. 将 zbxsignedsession 替换为 cookie 2. 使用单点登录（SAML）登录 作者：@random-robbie、@jweny 和 @Mr-xn 链接：https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

grafana-CVE-2018-15727

Grafana CVE-2018-15727 exploit Instalación $ go get github.com/u238/grafana-CVE-2018-15727 Uso $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for Grafana 5.x: grafanauser : ldapadmin...

CVE-2025-14440

CVE-2025-14440 JAY Login & Register -id 参数： -u 或 --url：目标站点（可以带或不带 https://） -id 或 --id：要利用的用户 ID（例如，1 表示管理员） 📈 预期输出 如果利用成功 ，您将看到： 屏幕上打印出获取的会话 cookie，并且 站点及关联 cookie 保存到 extractedcookies.txt 文件中 如果利用失败 （站点不易受攻击、用户 ID 无效或已打补丁），脚本将以优雅方式通知您。 所有相关的状态和错误信息都会清晰显示。 ⚠️ 免责声明 此脚本仅提供用于教育和授权的渗透测试目的 。...

CVE-2024-3400-POC

CVE-2024-3400 RCE テストスクリプト 概要 このPythonスクリプトは、特定のPalo Alto Networks GlobalProtectポータルに影響を与えるリモートコード実行（RCE）脆弱性、具体的にはCVE-2024-3400をテストするために設計されています。この脆弱性により、Cookie操作を介して不正なコマンド実行が可能になります。 このスクリプトは、base64エンコードされたコマンド（echo test）を含むCookieペイロードを添えて、指定されたURLのリストに安全なHTTP...

BIT-JENKINS-2026-84652

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me" cookie, allowing attackers able to serve content on the same site as Jenkins to set a known session cookie in the victim's browser, which after the victim...

CVE-2026-84652

In Jenkins versions 2.579 and earlier (including LTS 2.568.2 and earlier ), a vulnerability exists where the application fails to rotate the session when a user authenticates using the "remember me" cookie. An attacker capable of serving content on the same site as Jenkins can set a known session...

CVE-2026-77995

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0, OAuth Single Sign-On – OIDC SSO 1.2.2, Login with Keycloak OAuth Single Sign-On SSO 1.2.2, Single Sign-On for Educational Institutes 1.2.2 - The manipulation of a cookie value allows actors to login a...

EUVD-2026-64844

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0, OAuth Single Sign-On – OIDC SSO 1.2.2, Login with Keycloak OAuth Single Sign-On SSO 1.2.2, Single Sign-On for Educational Institutes 1.2.2 - The manipulation of a cookie value allows actors to login a...

CVE-2026-77995

CVE-2026-77995 is an arbitrary account takeover vulnerability in the miniOrange OAuth Client Joomla extension, affecting versions prior to 3.2.0 . The flaw is caused by the manipulation of a cookie value , allowing an unauthenticated attacker to log in as any account on the site, including admini...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

PT-2026-80858

Name of the Vulnerable Software and Affected Versions miniOrange OAuth Client versions prior to 3.2.0 Description An issue in the miniOrange OAuth Client extension for Joomla allows an attacker to log in as any account, including administrators, without requiring a valid account or prior...

UBUNTU-CVE-2026-48551

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matching cookie and request parameter values to bypass CSRF protection, enabling unauthenticated attackers to run command...

PT-2026-67445

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

HTTP Response Splitting

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to HTTP Response Splitting via the X-Forwarded-Prefix HTTP header. An attacker can manipulate cookie attributes by injecting arbitrary values into the Set-Cookie path attribute,...