271 matches found
CVE-2025-11699
The nopCommerce e-commerce platform (based on ASP.NET Core ) is vulnerable to session hijacking because it fails to invalidate session cookies after a user logs out or a session terminates. This flaw allows an attacker who has obtained a valid session cookie—via methods such as XSS , network inte...
CVE-2025-11699 CVE-2025-11699
nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attacker who has a a valid session cookie access to privileged endpoints such as /admin even after the legitimate user has logged out, enabling session hijacking...
CVE-2025-11699: Insufficient Session Expiration
nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attacker who has a a valid session cookie access to privileged endpoints such as /admin even after the legitimate user has logged out, enabling session hijacking...
nopCommerce 安全漏洞
nopCommerce is a suite of open source, general purpose e-commerce platforms from nopCommerce, Inc. A security vulnerability exists in nopCommerce versions prior to 4.70 and 4.80.3, which stems from a failure to invalidate a session cookie after logout or session termination, which could lead to...
PT-2025-48449
Name of the Vulnerable Software and Affected Versions nopCommerce versions prior to 4.80.3 Description The software does not invalidate session cookies after logout or session termination. This allows an attacker with a valid session cookie to access privileged endpoints, such as '/admin', even...
CVE-2021-42193
nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/id. Each time a user views the product in the shop, the XSS payload fires...
EUVD-2021-13700
Malware in sbrugna...
EUVD-2019-9292
Malware in sbrugna...
EUVD-2019-9293
Malware in sbrugna...
EUVD-2019-9294
Malware in sbrugna...
EUVD-2020-21843
Malware in sbrugna...
EUVD-2019-9295
Malware in sbrugna...
EUVD-2019-3190
Malware in sbrugna...
EUVD-2022-32892
Malicious code in bioql PyPI...
EUVD-2022-32893
Malicious code in bioql PyPI...
EUVD-2022-32894
Malicious code in bioql PyPI...
EUVD-2022-31964
Malicious code in bioql PyPI...
EUVD-2022-31498
Malicious code in bioql PyPI...