CVE-2014-3466_PoC

CVE-2014-3466 GnuTLS 버퍼 오버플로우: 세션 ID 길이 검사에 대한 개념 증명 정보 참조: https://bugzilla.redhat.com/showbug.cgi?id=1101932 이는 무기화된 익스플로잇이 아닙니다. 경고: 이 파이썬 코드는 못생겼습니다. ServerHello를 거의 손으로 제작했고, 파이썬 부분 자체에 약 5분이 아니라 15분 정도만 썼습니다. 원하신다면 이 익스플로잇을 자유롭게 개선해 주세요 가능하면 저에게 알려주세요!. 예제 악성 ServerHello 코드로 리스너를 시작하십시오:...

toutatis

Toutatis 👋 안녕하세요! 전문적인 문의나 협업이 필요하시면 다음 주소로 연락해 주세요: [email protected] 📧 가급적이면 전문 이메일을 사용해 주세요. 간결하고 달콤하게, 모두 영어로 부탁드립니다! Toutatis는 인스타그램 계정에서 이메일, 전화번호 등 정보를 추출할 수 있는 도구입니다 BTC 기부 : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ 💡 사전 요구 사항 Python 3 🛠️ 설치 PyPI로 설치 pip install toutatis Github으로 설치...

details-for-CVE-2022-46505

CVE-2022-46505 세부 정보 MatrixSSL 세션 재개 버그 1. 버그 설명 MatrixSSL 4.5.1-open 및 이전 버전의 문제로 인해 SessionID 필드가 안전하게 검사되지 않아 모두 0인 MasterSecret 이 잘못 사용되어 비밀 데이터를 복호화할 수 있습니다. 2. 영향을 받는 버전 MatrixSSL 4.5.1-open 및 이전 버전 3. 취약점 유형 TLS 재개 세션 복호화 4. 버그 세부 사항 MatrixSSL 서버는 협상된 세션 정보를 리스트를 통해 저장합니다. root@kitploit:...

CVE-2026-92983 InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch

InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate...

CVE-2026-92983

InternLM LMDeploy through 0.17.0 is affected by a memory exhaustion vulnerability in its DistServe prefill/decode disaggregation mode . The root cause is that the proxy uses user-facing session IDs instead of internal scheduler keys, causing scheduler sessions to never be released. An unauthentic...

CVE-2026-92983 InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch

InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate...

CVE-2020-10199_POC-EXP

影响版本 + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version + + EXP: python3 cve-2020-10199cmd.py...

CVE-2026-39039

BharatMLStack (by Meesho ), in versions up to and including v1.3.0 , stores the JWT authentication token , full user object, and session ID in the browser's localStorage via the Trufflebox UI . Since localStorage is fully accessible to any JavaScript executing on the page, an attacker with the ab...

Fedora 43 : perl-Dancer2 (2026-d0bededb87)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0bededb87 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...

CVE-2023-0264

CVE-2023-0264에 대한 PoC 권한 부여 코드 흐름 중 세션 하이재킹을 허용하는 Keycloak 취약점 https://github.com/advisories/GHSA-9g98-5mj6-f9mv 참조 전제 조건 Docker curl jq python3 또는 HTTP로 정적 파일을 제공하는 다른 도구 재현 단계 1. ./run-keycloak-container.sh로 Keycloak 컨테이너를 시작합니다. 2. ./create-users.sh로 사용자 alice와 mallory 두 명을 생성합니다. 3. 이 저장소의 정적...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Validates the session ID and tree ID in compound requests. The function smb2getmsg in smb2getksmbdtcon and smb2checkusersession always returns the first command in a compound request’s headers. If SMB2TREECONNECTHE is the...

Fedora 44 : perl-Dancer2 (2026-d13a2593b1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d13a2593b1 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...

CVE-2021-27513-CVE-2021-27514

exploit-eyesofnetwork Version 5.3.5 up to 5.3.10 root@kitploit: CVE-2021-27513 / CVE-2021-27514 무차별 대입 공격은 비프로덕션 환경에서 매우 오래 걸릴 수 있습니다. 로그인할 때마다 "sessionid"가 생성되기 때문입니다 그러나 앱에서 생성된 모든 sessionid는 유효합니다 PoC를 위해 EyesOfNetwork 솔루션을 배포하고 300개의 로그인으로 일일 사용을 시뮬레이션했습니다 프로덕션 환경에서는 3개월 동안 "sessions" 테이블에서...

EUVD-2026-74954

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-64857

tirreno , a security framework, is affected by a session fixation vulnerability in versions prior to 0.10.0 . During login, tirreno validates credentials and establishes the authenticated session but fails to call session_regenerate_id(), leaving the session identifier unchanged before and after ...

CVE-2026-62645

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device...

CVE-2026-62645

A vulnerability in Reyrolle 7SR5 (all versions prior to V2.70 ) exposes information through the web interface that allows an attacker to calculate current and past session ID numbers . This enables authentication bypass and unauthorized access to the device. The vulnerability is rated CVSS 3.1: 9...

EUVD-2026-42312

Socket.IO: Engine.IO WebTransport SID DoS...

CVE-2026-73180

A flaw was found in Apache Tomcat. This vulnerability, categorized as Insufficient Session Expiration, occurs when an authenticated HTTP session's ID is modified after a WebSocket connection has been established. Under these conditions, the WebSocket session fails to terminate as expected when th...

SUSE CVE-2026-73180

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...