Lucene search
+L

268 matches found

myhack58
myhack58
added 2006/07/12 12:00 a.m.28 views

Cross-site achieve HTTP session hijacking-vulnerability warning-the black bar safety net

A Web application is by 2 ways to determine and keep track of different users: a Cookie or Session also called session-Cookie is. Wherein the Cookie is stored on the local computer, the expiration time is very long, so for the Cookie of the means of attack is generally to steal user Cookies and...

6.6AI score
SaveExploits0
FreeBSD
FreeBSD
added 2005/06/29 12:00 a.m.30 views

clamav -- MS-Expand file handling DoS vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of an input validation error in Clam AntiVirus ClamAV allows attackers to cause a denial of service condition. The vulnerability specifically exists due to improper behavior during exceptional conditions. Successful exploitation allows...

5CVSS6.3AI score0.02526EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.31 views

CVE-2004-0462

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server...

6.4AI score0.00433EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2005/02/13 5:00 a.m.34 views

CVE-2004-1478

JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session...

6.7AI score0.03405EPSS
SaveExploits0References6
NVD
NVD
added 2004/12/31 5:00 a.m.23 views

CVE-2004-1478

JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session...

7.5CVSS6.7AI score0.03405EPSS
SaveExploits0References6
NVD
NVD
added 2004/09/16 4:00 a.m.27 views

CVE-2004-0866

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

7.5CVSS6.3AI score0.10075EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2004/09/14 4:00 a.m.47 views

CVE-2004-0746

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

6.7AI score0.0189EPSS
SaveExploits0References8
Exploit DB
Exploit DB
added 2003/07/07 12:00 a.m.38 views

ColdFusion MX - Remote Development Service

!/usr/bin/perl RDScDump.pl By angry packet THIS IS AN UNPATCHED VULNERABILITY - THIS IS AN UNPATCHED VULNERABILITY ColdFusion 6 MX Server does several things in order to get remote dir structure so we will need to recreate these functions. This is a "almost" complete emulation of a dreamweaver...

5.8AI score
SaveExploits0
Rows per page
Query Builder