CVE-2026-66420: Origin Validation Error

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...

CVE-2026-59804: Missing Origin Validation in WebSockets

Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by opening a cross-origin WebSocket connection to the local Socket.IO server, whi...

PraisonAI 访问控制错误漏洞

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.139 and praisonaiagents prior to 1.5.140 contained an access control vulnerability. This vulnerability stemmed from the lack of authentication on the browser bridge and...

CVE-2026-25072: Use of Insufficiently Random Values

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated sessions. Attackers can predict session identifiers using insufficiently random cook...

PT-2026-23783

Name of the Vulnerable Software and Affected Versions XikeStor SKS8310-8X Network Switch firmware versions prior to 1.04.B07 Description The XikeStor SKS8310-8X Network Switch firmware contains a flaw related to session identifiers. A remote attacker can hijack authenticated sessions by predictin...

EUVD-2013-0948

Malware in sbrugna...

EUVD-2012-5096

Malware in sbrugna...

EUVD-2011-3101

Malware in sbrugna...

EUVD-2002-0417

Malware in sbrugna...

EUVD-2009-2578

Malware in sbrugna...

EUVD-2000-0110

Malware in sbrugna...

EUVD-2014-4708

Malware in sbrugna...

EUVD-2006-3578

Malware in sbrugna...

EUVD-2009-3632

Malware in sbrugna...

EUVD-2009-1873

Malware in sbrugna...

EUVD-2011-3387

Malware in sbrugna...

EUVD-2014-2545

Malware in sbrugna...

EUVD-2010-3469

Malware in sbrugna...

CVE-2020-27739

A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread...

CVE-2010-3471

Session fixation vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via unspecified vectors...