Lucene search
+L

193 matches found

Kitploit
Kitploit
added 2026/09/04 7:10 a.m.5 views

CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit 针对关键漏洞 CVE-2024-51996 的 Exploit,可在使用 Remember Me 机制的 Symfony 应用中实现 认证绕过 。 🧠 影响 :无需有效凭据即可冒充特权用户(如 admin)。 📖 描述 CVE-2024-51996 是 Symfony 组件 security-http 中的一个漏洞。问题在于 未能正确验证REMEMBERME cookie 中所包含的用户名,从而允许在令牌未失效的情况下修改用户名。 拥有有效 cookie(例如...

7.5CVSS7.1AI score0.0062EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/03 2:12 p.m.7 views

EUVD-2026-70485

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

9.8CVSS5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/02 3:51 p.m.5 views

CVE-2025-5947

CVE-2025-5947 CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 漏洞利用工具 CVE-2025-5947 漏洞利用工具 - Service Finder Bookings WordPress Service Finder Bookings ≤ 6.0 插件中身份验证绕过漏洞的利用工具 📋 目录 漏洞介绍 技术细节 安装 使用方法 示例 结果 安全 参考资料 🔴 漏洞介绍 CVE-2025-5947 Service Finder Bookings WordPress 插件 6.0...

9.8CVSS9AI score0.04469EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/09/02 5:16 a.m.4 views

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Dahua认证绕过PoC模拟利用 CVE-2021-33044 概述 Dahua IP摄像头是安防监控系统中广泛使用的物联网设备。由于常部署在内网或可从互联网访问,IP摄像头的安全漏洞会严重影响隐私和信息安全。 CVE-2021-33045是存在于某些Dahua摄像头系列中的安全漏洞,允许未经身份验证即可非法访问内部配置资源。该漏洞源于设备固件中访问控制机制不严格。 漏洞信息 项目| 内容 ---|--- CVE| CVE-2021-33044 类型| Authentication Bypass 严重程度| Critical CVSS 9.8 认证| 无需认证 影响范围| Dahua...

10CVSS8.1AI score0.99871EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/31 4:08 p.m.5 views

CVE-2025-10720-PoC

Descripción Esta prueba de concepto PoC describe una vulnerabilidad de omisión de autenticación encontrada en el plugin de WordPress WP Private Content Plus v3.6.2. El problema permite que usuarios no autenticados omitan el contenido protegido por contraseña debido a una dependencia inapropiada d...

6.5CVSS5.2AI score0.00277EPSS
SaveExploits0
NVD
NVD
added 2026/08/31 3:16 a.m.13 views

CVE-2026-75757

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

8.3CVSS0.00301EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/31 2:20 a.m.6 views

CVE-2026-75757 AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

8.3CVSS5.9AI score0.00301EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/08/26 3:33 p.m.6 views

EUVD-2026-66598

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS5.6AI score0.00139EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/26 3:16 p.m.6 views

CVE-2026-74752

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

9.8CVSS0.00434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-48548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormI...

6.9CVSS5.9AI score0.00139EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-74752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled...

9.8CVSS5.4AI score0.00434EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/11 5:34 p.m.45 views

CVE-2026-73214

Coturn (TURN/STUN server) has a vulnerability in pre-4.16.0 where dtls_server_input_handler() and create_new_connected_udp_socket() retain OpenSSL dtls1_reassemble_fragment() state for a 35-byte fragmented ClientHello that declares a 650,000-byte handshake before cookie validation. This allows an...

8.2CVSS5.3AI score0.00423EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70829

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...

8.2CVSS5.9AI score0.00423EPSS
SaveExploits0References32
NVD
NVD
added 2026/07/30 6:25 a.m.18 views

CVE-2026-15255

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

5.3CVSS0.00202EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 6:00 a.m.15 views

EUVD-2026-50999

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

5.3CVSS5.9AI score0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/24 10:20 p.m.45 views

CVE-2026-60134

Vulnerability: CVE-2026-60134 affects the Weintek cMT3092X HMI due to reliance on cookies without proper validation and integrity checks in a security decision. What’s affected: Weintek cMT3092X HMI. The description states that a non-privileged user can modify cookies to achieve elevated privileg...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/24 10:20 p.m.41 views

CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

8.8CVSS0.00325EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/22 2:17 p.m.9 views

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

3.7CVSS5.7AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/22 1:09 p.m.9 views

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

3.7CVSS5.3AI score0.00178EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/06/27 12:00 a.m.21 views

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2466)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...

7.5CVSS6.7AI score0.0069EPSS
SaveExploits0References8
Rows per page
Query Builder