DEBIAN-CVE-2017-15010

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...

UBUNTU-CVE-2017-15010

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...

HBGK DVR 3.0.0 Build 20161206 Authentication Bypass

Exploit Title: HBGK DVR V3.0.0 build20161206 - Authentication Bypass Date: 24-09-2017 Vendor Homepage: http://www.hbgk.net/en/ Exploit Author: RAT - ThiefKing Contact: https://www.facebook.com/cctvsuperpassword Website: http://tromcap.com Category: webapps Tested on: V2.3.1 build20160927, V3.0.0...

Multiple Apple Products WebKit Component Security Bypass Vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Stored Cross-Site Scripting Vulnerability in PlayStation Live App

Playcaster Live App is a short video live interactive application. Playcafe Live App has a stored cross-site scripting vulnerability that allows an attacker to insert malicious js code into the page to obtain user cookies and other information...

Stored Cross-Site Scripting Vulnerability in Vienna Hotel App

Vienna Hotel App is a hotel booking software officially launched by Vienna Hotel. Vienna Hotel App has a stored cross-site scripting vulnerability that allows an attacker to insert malicious js code into a page to obtain information such as user cookies...

CVE-2015-5183

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ...

CVE-2015-5183

CVE-2015-5183 affects Red Hat AMQ/Hawtio console where cookies are missing HTTPOnly and Secure attributes. This exposes session cookies and could enable session-reuse or related unauthorized access in affected deployments. Public mentions and Red Hat advisories confirm the issue as a cookie secur...

CVE-2015-5183

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ...

Stored Cross-Site Scripting Vulnerability in Xiao Zhuge Financial App

Xiao Zhuge Finance APP is a comprehensive Internet financial management platform. Xiao Zhuge Financial APP has a stored cross-site scripting vulnerability, which can be exploited by attackers to insert malicious xxs code and obtain sensitive information such as administrator cookies...

Multiple Vulnerabilities in the Memory Bug App

Memory Bug is a memory cloud app that preserves a lifetime of memories. There are logical design, cross-site scripting and directory traversal vulnerabilities in the Memory Bug APP, which allow attackers to successfully register any account, reset account passwords, and insert malicious xxs code ...

Stored Cross-Site Scripting Vulnerability in Yauen.com App

Youyuan.com APP is a same-city mobile marriage dating software. There is a stored cross-site scripting vulnerability in Yau Yuan APP, which can be exploited by an attacker to insert malicious xss cross-site code and obtain sensitive information such as administrator cookies...

Stored Cross-Site Scripting Vulnerability in the YoYo Housing App

YouYouGoodHouse app is a rental app created by Chengdu GoodHouse Technology Co. A stored cross-site scripting vulnerability exists in the "About Us" section of the YouYouHaoRooms app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in...

Stored Cross-Site Scripting Vulnerability in Palm QC App

Palm Qingcheng app is a smartphone-based city travel information query software. A stored cross-site scripting vulnerability exists in the "Feedback" section of the app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijackin...

Stored Cross-Site Scripting Vulnerability in Pauai App

Bao Ai APP is an emotional life information platform that solves the emotional problems of both genders. There is a stored cross-site scripting vulnerability in Pao Ai APP, which can be exploited by an attacker to insert malicious xss cross-site code and obtain sensitive information such as...

Stored Cross-Site Scripting Vulnerability in Music Gang App

Music Help is a music education app. Music Help APP has a stored cross-site scripting vulnerability, which can be exploited by an attacker to insert malicious xss cross-site code and obtain sensitive information such as administrator cookies...

CVE-2014-8684

CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object injection attacks by leveraging use of standard string comparison operators to compare cryptographic hashes...

CVE-2014-8686

CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available...

Code injection

CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available...

Design/Logic Flaw

CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object injection attacks by leveraging use of standard string comparison operators to compare cryptographic hashes...