EUVD-2026-85840

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting XSS vulnerability. When a request is made for a non-existent resource ending in ".htm", the web interface returns an HTTP 403 "Forbidden Path" error page that echoes the requested URL path...

cookiescanner

cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...

CVE-2023-45857-Demo

确认 axios 漏洞 CVE-2023-45857 行为的演示 1. 在 dev container 中启动 2. 在 app 容器中运行npm run dev 3. 访问 http://app.localhost 4. 在浏览器的开发者工具中确认 Cookie 中已设置XSRF-TOKEN 值为CREDENTIALTOKEN HttpOnly 为 false SameSite 为 Strict 5. 按下按钮 6. 在开发者工具中确认对whoami.localhost/api的请求的请求头中存在x-xsrf-token且值为CREDENTIALTOKEN 由于 whoami...

CVE-2022-3942

CVE-2022-3942 Sanitization Management System 中的跨站脚本漏洞 描述：Sanitization Management System v1.0 存在一个跨站脚本（XSS）漏洞，攻击者可通过在请求报价表单的备注或地址字段中注入精心构造的有效载荷，执行任意 Web 脚本或 HTML。一旦登录的工作人员或管理员用户打开该报价，XSS 即被触发——加之 Cookie 未设置 HttpOnly 标志，因此该漏洞可能被用于窃取登录用户的 Cookie。 复现步骤：...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Description: A cross-site scripting XSS vulnerability in Sanitization Management System v1.0 allows potential attackers to upload arbitrary files via a crafted name into the system logo Fields of the System Info Fields. The cookie has no HttpOnly Fl...

CVE-2022-35497

在 Trimble 的 TM4WEB =22.2.0 中，由于会话标识符的安全配置错误，攻击者可能通过影响外部文档查看器端点的反射型跨站脚本恢复有效的会话 Cookie。 具体而言，用于维持会话的三个 Cookie 分别是 UID、rstring 和 PHPSESSIONID，它们均未设置适当的 HttpOnly 标志，因而无法防止通过 JavaScript 执行向量恢复 Cookie。 步骤 1 : 攻击者利用反射型跨站脚本漏洞 CVE-2022-35499 获取已认证受害者的会话 Cookie。 攻击者会在面向互联网且可接收 HTTP...

CVE-2026-58504

CVE-2026-58504 is a Stored XSS in draw.io prior to version 30.2.5 , constituting a patch bypass of CVE-2026-46642 . When a victim opens or imports a crafted .drawio file, a pair of sibling cells triggers the vulnerability: an HTML cell keeps the formatted-label path active while an editable=0 pla...

CVE-2022-3949

CVE-2022-3949 简单收银系统中的 XSS 漏洞 简单收银系统（Simple Cashiering System）容易受到跨站脚本攻击（XSS）的影响——恶意行为者可以将被入侵用户的 fullname 更改为 XSS Payload，每当管理员访问用户选项卡或销售选项卡（并查看恶意行为者所进行的销售）时，该 Payload 就会被触发。由于 cookie 没有设置 HttpOnly 标志，这可能导致会话接管。 复现方法： 下载...

CVE-2023-31851

CVE-2023-31851 Cudy LT400 的基于 Web 的管理界面存在反射型跨站脚本（XSS）攻击。 页面 /cgi-bin/luci/admin/network/wireless/status 通过 iface 参数存在反射型 XSS。 利用方法涉及向受害者发送包含恶意代码的特制请求。 受影响的应用程序未将 Session Cookie 设置为 HttpOnly 属性；这可能导致通过会话令牌窃取实现管理员接管。 受影响固件版本：1.13.4 - 1.15.18 - 1.15.27 PoC root@kitploit: GET...

CVE-2023-31852

CVE-2023-31852 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/config has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

CVE-2026-53660

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie through...

CVE-2026-53660 OpenAM Insecure SSO Cookie Initialization

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie through...

CVE-2026-53660

OpenAM (Open Access Management) prior to 16.1.1 ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false and no protective SameSite attribute by default. The same cookie is reused as a CSRF token through CsrfProtection in OAuth and OpenID Connect consent flows. Combined with a same-origin XSS...

CVE-2026-53660 OpenAM Insecure SSO Cookie Initialization

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie through...

CVE-2026-82697

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

CVE-2026-82697 sambitraj Student-Management-System session_start cookie httponly flag

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

EUVD-2026-68515

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

CVE-2026-82697

CVE-2026-82697 affects the sambitraj Student-Management-System (a rolling-release GitHub project) up to commit 56ba287. The vulnerable component is the session_start function, which sets a session cookie without the httponly flag , allowing JavaScript access to the session cookie. The attack is r...

CVE-2026-82697 sambitraj Student-Management-System session_start cookie httponly flag

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...