CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe 인증 우회 익스플로잇 CVE-2024-51996 심각도 취약점에 대한 익스플로잇으로, Remember Me 메커니즘을 사용하는 Symfony 애플리케이션에서 인증 우회 를 허용합니다. 🧠 영향 : 유효한 자격 증명 없이 권한 있는 사용자예: admin를 사칭할 수 있습니다. 📖 설명 CVE-2024-51996 은 Symfony의 security-http 구성 요소에 있는 취약점입니다. 결함은 REMEMBERME 쿠키에 포함된 사용자 이름을 올바르게 검증하지 않...

EUVD-2026-70485

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

CVE-2025-5947

CVE-2025-5947 CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit CVE-2025-5947 Exploit - Service Finder Bookings WordPress Service Finder Bookings ≤ 6.0 플러그인의 인증 우회 취약점을 위한 익스플로잇 도구 📋 목차 취약점 정보 기술 세부사항 설치 사용법 예제 결과 보안 참고 자료 🔴 취약점 정보 CVE-2025-5947 Service Finder Bookings WordPress 플러그인 ...

CVE-2025-10720-PoC

설명 이 개념 증명PoC은 WordPress 플러그인 WP Private Content Plus v3.6.2 에서 발견된 인증 우회 취약점을 설명합니다. 이 문제는 클라이언트 측 쿠키에 대한 부적절한 신뢰로 인해 인증되지 않은 사용자가 비밀번호로 보호된 콘텐츠를 우회할 수 있게 합니다. 세부 정보 취약점 유형 : 인증 우회비인증 CWE-ID : CWE-565 - 검증 및 무결성 검사 없이 쿠키에 의존 영향 악용에 성공하면 인증되지 않은 사용자가 플러그인의 전역 비밀번호 기능으로 보호된 콘텐츠에 접근할 수 있습니다. 참고 자료...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Simulación de explotación de Dahua Authentication Bypass PoC CVE-2021-33044 Resumen Las cámaras IP Dahua son dispositivos IoT ampliamente utilizados en sistemas de vigilancia de seguridad. Debido a que a menudo se despliegan en redes internas o se accede a ellas desde Internet, las vulnerabilidad...

CVE-2026-75757

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

CVE-2026-75757 AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

EUVD-2026-66598

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

CVE-2026-74752

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

Linux Distros Unpatched Vulnerability : CVE-2026-48548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormI...

Linux Distros Unpatched Vulnerability : CVE-2026-74752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled...

CVE-2026-73214

Coturn (TURN/STUN server) has a vulnerability in pre-4.16.0 where dtls_server_input_handler() and create_new_connected_udp_socket() retain OpenSSL dtls1_reassemble_fragment() state for a 35-byte fragmented ClientHello that declares a 650,000-byte handshake before cookie validation. This allows an...

PT-2026-70829

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...

CVE-2026-15255

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

EUVD-2026-50999

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-60134

Vulnerability: CVE-2026-60134 affects the Weintek cMT3092X HMI due to reliance on cookies without proper validation and integrity checks in a security decision. What’s affected: Weintek cMT3092X HMI. The description states that a non-privileged user can modify cookies to achieve elevated privileg...

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2466)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...