CVE-2009-1757

Transmission is affected by a CSRF vulnerability (CVE-2009-1757) in the web interface, enabling an attacker to hijack user authentication via unknown vectors. Affected releases include Transmission 1.5 up to 1.53 and 1.6 up to 1.61. The issue has been documented across multiple advisories (Red Ha...

CVE-2009-0093

MS09-008 fixes multiple DNS/WINS vulnerabilities in Windows servers that could allow remote attackers to spoof WPAD/ISATAP and hijack network traffic. The WPAD vulnerability (CVE-2009-0093) arises when dynamic updates are enabled and WPAD/ISATAP registrations are not restricted in DNS, enabling a...

CVE-2008-0900

CVE-2008-0900 affects BEA WebLogic Server and Express versions 8.1 SP4–SP6, 9.2 MP1, and 10.0. The root cause is a session fixation vulnerability that allows remote authenticated users to hijack web sessions via unknown vectors. Affected components are web session handling functions in these BEA ...