Spring Security 输入验证错误漏洞

Spring Security is a security framework developed by Spring OpenSource that includes authentication and authorization features. Spring Security has a vulnerability related to input validation. This vulnerability arises from the use of CookieRequestCache and CookieServerRequestCache, which store...

CVE-2026-28678

DSA Study Hub (server/routes/auth.js) is affected. Before commit d527fba, authentication used JWTs stored in HTTP cookies without cryptographic protection of the payload, enabling Insufficiently Protected Credentials. The issue impacts the authentication flow and could allow unauthorized access; ...

CVE-2026-28678 dsa-hub-server: Clear-Text Storage of Sensitive Data

DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens JWTs were stored in HTTP cookies without cryptographic protection...

EUVD-2012-0868

Malware in sbrugna...

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software lies in the use of cookies for storing confidential information without the HttpOnly flag. This allows a hacker to disclose the protected information.

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software relates to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Minor update (2) for Vivaldi Desktop Browser 5.0

Download Vivaldi The following improvements were made since the first 5.0 stable, minor update: Chromium Upgraded to 96.0.4664.113: includes fix for CVE-2021-4102 Mail Beta Import Email from Opera function is disabled VB-84729 PrivacyPrivate Window Cookies can sometimes get saved to the normal...

CVE-2012-0843

uzbl: Information disclosure via world-readable cookies storage file...

Information disclosure

uzbl: Information disclosure via world-readable cookies storage file...

CVE-2012-0843

CVE-2012-0843 affects the uzbl browser, where information disclosure arises from a world-readable cookies storage file. Root cause is exposure of cookies data stored in a world-readable file, enabling partial confidentiality impact (C: HIGH in CVSS3.1) with local, low-complexity access and no aut...

CVE-2012-0843

uzbl: Information disclosure via world-readable cookies storage file...

CVE-2012-0843

Removed by vendor...