CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit 针对关键漏洞 CVE-2024-51996 的 Exploit，可在使用 Remember Me 机制的 Symfony 应用中实现 认证绕过 。 🧠 影响 ：无需有效凭据即可冒充特权用户（如 admin）。 📖 描述 CVE-2024-51996 是 Symfony 组件 security-http 中的一个漏洞。问题在于 未能正确验证REMEMBERME cookie 中所包含的用户名，从而允许在令牌未失效的情况下修改用户名。 拥有有效 cookie（例如...

EUVD-2026-70485

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

CVE-2025-5947

CVE-2025-5947 CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 漏洞利用工具 CVE-2025-5947 漏洞利用工具 - Service Finder Bookings WordPress Service Finder Bookings ≤ 6.0 插件中身份验证绕过漏洞的利用工具 📋 目录 漏洞介绍 技术细节 安装 使用方法 示例 结果 安全 参考资料 🔴 漏洞介绍 CVE-2025-5947 Service Finder Bookings WordPress 插件 6.0...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Dahua认证绕过PoC模拟利用 CVE-2021-33044 概述 Dahua IP摄像头是安防监控系统中广泛使用的物联网设备。由于常部署在内网或可从互联网访问，IP摄像头的安全漏洞会严重影响隐私和信息安全。 CVE-2021-33045是存在于某些Dahua摄像头系列中的安全漏洞，允许未经身份验证即可非法访问内部配置资源。该漏洞源于设备固件中访问控制机制不严格。 漏洞信息 项目| 内容 ---|--- CVE| CVE-2021-33044 类型| Authentication Bypass 严重程度| Critical CVSS 9.8 认证| 无需认证 影响范围| Dahua...

CVE-2025-10720-PoC

Descripción Esta prueba de concepto PoC describe una vulnerabilidad de omisión de autenticación encontrada en el plugin de WordPress WP Private Content Plus v3.6.2. El problema permite que usuarios no autenticados omitan el contenido protegido por contraseña debido a una dependencia inapropiada d...

CVE-2026-75757

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

CVE-2026-75757 AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

EUVD-2026-66598

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

CVE-2026-74752

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

Linux Distros Unpatched Vulnerability : CVE-2026-48548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormI...

Linux Distros Unpatched Vulnerability : CVE-2026-74752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled...

CVE-2026-73214

Coturn (TURN/STUN server) has a vulnerability in pre-4.16.0 where dtls_server_input_handler() and create_new_connected_udp_socket() retain OpenSSL dtls1_reassemble_fragment() state for a 35-byte fragmented ClientHello that declares a 650,000-byte handshake before cookie validation. This allows an...

PT-2026-70829

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...

CVE-2026-15255

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

EUVD-2026-50999

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

CVE-2026-60134

Vulnerability: CVE-2026-60134 affects the Weintek cMT3092X HMI due to reliance on cookies without proper validation and integrity checks in a security decision. What’s affected: Weintek cMT3092X HMI. The description states that a non-privileged user can modify cookies to achieve elevated privileg...

CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2466)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...