CVE-2023-45857-Demo

Démo pour vérifier le comportement de la vulnérabilité CVE-2023-45857 d'axios 1. Démarrer avec le dev container 2. Exécuter npm run dev dans le conteneur app 3. Accéder à http://app.localhost 4. Vérifier que le cookie XSRF-TOKEN est défini dans les outils de développement du navigateur La valeur...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting XSS dans WonderCMS Description : Une vulnérabilité de script intersite XSS dans le système de gestion de la désinfection Sanitization Management System v1.0 permet à des attaquants potentiels de téléverser des fichiers arbitraires via un nom conçu dans les champ...

cookiescanner

cookiescanner Outil pour vérifier le flag cookie sur plusieurs sites. Introduction Outil créé pour faciliter le processus de vérification du flag cookie lors de l'analyse de plusieurs serveurs web. Si vous voulez savoir pourquoi cet outil pourrait être utile ?...

CVE-2023-31853

CVE-2023-31853 Une attaque de type Cross-Site Scripting XSS réfléchi existe dans l'interface de gestion web du Cudy LT400. La page /cgi-bin/luci/admin/network/bandwidth présente une XSS réfléchie via le paramètre icon. Les méthodes d'exploitation consistent à envoyer une requête spécialement conç...

CVE-2022-3949

CVE-2022-3949 XSS dans Simple Cashiering System Simple Cashiering System est vulnérable au Cross Site Scripting XSS - un acteur malveillant peut remplacer le fullname d'un utilisateur compromis par un payload XSS, et dès qu'un administrateur visite l'onglet utilisateur ou l'onglet des ventes et...

CVE-2022-3942

CVE-2022-3942 Cross-Site Scripting dans Sanitization Management System Description : Une vulnérabilité de cross-site scripting XSS dans Sanitization Management System v1.0 permet à des attaquants potentiels d'exécuter des scripts web ou du HTML arbitraire via une charge utile payload conçue et...

CVE-2026-82697

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

EUVD-2026-68515

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

CVE-2026-82697

CVE-2026-82697 affects the sambitraj Student-Management-System (a rolling-release GitHub project) up to commit 56ba287. The vulnerable component is the session_start function, which sets a session cookie without the httponly flag , allowing JavaScript access to the session cookie. The attack is r...

CVE-2026-82697 sambitraj Student-Management-System session_start cookie httponly flag

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

CVE-2022-35497

Dans TM4WEB de Trimble =22.2.0, en raison d'une mauvaise configuration de sécurité des identifiants de session, il est possible de récupérer des cookies de session valides via un cross-site scripting réfléchi affectant le point de terminaison du visualiseur de documents externe. Plus précisément,...

CVE-2023-31852

CVE-2023-31852 Esiste un attacco di cross-site scripting XSS riflesso nell'interfaccia di gestione basata sul web di Cudy LT400. La pagina /cgi-bin/luci/admin/network/wireless/config presenta XSS riflesso tramite il parametro iface. I metodi di sfruttamento comporterebbero l'invio di una richiest...

CVE-2023-31851

CVE-2023-31851 Existe um ataque de cross-site scripting XSS refletido na interface de gerenciamento baseada na web do Cudy LT400. A página /cgi-bin/luci/admin/network/wireless/status possui XSS refletido através do parâmetro iface. Os métodos de exploração envolvem o envio de uma requisição...

OpenAM Insecure SSO Cookie Initialization

Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...

PT-2026-76574

Name of the Vulnerable Software and Affected Versions Etherpad versions 2.6.0 through 3.0.0 Description An issue exists in the device-to-device author-token transfer mechanism. The system uses the POST /tokenTransfer endpoint to store an author token and exposes it via the GET /tokenTransfer/uuid...

K000162890: Netty vulnerability CVE-2015-2156

Security Advisory Description Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improp...

Cookie Attribute Injection

undici is vulnerable to cookie attribute injection. The vulnerability is due to insufficient sanitization of cookie domain and unparsed values in setCookie, allowing attacker-controlled input to inject or override cookie attributes such as SameSite, Secure, and HttpOnly, potentially weakening...

EUVD-2026-50416

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields...

GHSA-V3R7-H72X-CJCM undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

Impact The setCookie function has two attribute injection paths. validateCookieDomain does not reject semicolons validateCookiePath already does at 0x3B, so a domain value like example.com; SameSite=None lands verbatim as Domain=example.com; SameSite=None. The unparsed array's loop only checks ea...

CVE-2026-16729

undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entries in the unparsed array are not sanitized, so attacker-influenced input can...