CVE-2014-3466_PoC

إثبات المفهوم لـ CVE-2014-3466 تجاوز سعة المخزن المؤقت في GnuTLS: التحقق من طول معرف الجلسة معلومات انظر: https://bugzilla.redhat.com/showbug.cgi?id=1101932 هذا ليس استغلالاً مسلحاً. تحذير: كود بايثون هذا قبيح، لقد قمت بصنع ServerHello يدوياً تقريباً وقضيت حوالي خمس خمس عشرة دقيقة فقط في جزء بايث...

toutatis

Toutatis 👋 नमस्ते! किसी भी पेशेवर पूछताछ या सहयोग के लिए, कृपया मुझसे यहाँ संपर्क करें: [email protected] 📧 कृपया पत्राचार के लिए अपने पेशेवर ईमेल का उपयोग करें। इसे संक्षिप्त और मधुर रखें, और सभी अंग्रेजी में! Toutatis एक उपकरण है जो आपको इंस्टाग्राम खातों से ईमेल, फ़ोन नंबर और अधिक जानकारी...

CVE-2020-10199_POC-EXP

الإصدارات المتأثرة + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version +...

GHSA-WFPM-5GCM-94CG Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Impact This is a prototype pollution / improper client lookup vulnerability in @socket.io/cluster-engine. Servers using @socket.io/cluster-engine may be impacted when attacker-controlled session IDs are processed in clustered deployments. A malicious client could use special property names such a...

EUVD-2026-88981

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup...

CVE-2023-0264

PoC لـ CVE-2023-0264 ثغرة في Keycloak تسمح باختطاف الجلسة أثناء تدفق رمز التفويض انظر https://github.com/advisories/GHSA-9g98-5mj6-f9mv المتطلبات الأساسية Docker curl jq python3 أو أداة أخرى لخدمة الملفات الثابتة عبر HTTP خطوات إعادة الإنتاج 1. شغّل حاوية Keycloak باستخدام...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Validates the session ID and tree ID in compound requests. The function smb2getmsg in smb2getksmbdtcon and smb2checkusersession always returns the first command in a compound request’s headers. If SMB2TREECONNECTHE is the...

details-for-CVE-2022-46505

details-for-CVE-2022-46505 خلل استئناف الجلسة في MatrixSSL 1. وصف الخلل توجد مشكلة في MatrixSSL 4.5.1-open والإصدارات الأقدم تؤدي إلى الفشل في التحقق الآمن من حقل SessionID، مما يؤدي إلى إساءة استخدام MasterSecret المكوّن من أصفار بالكامل والذي يمكنه فك تشفير البيانات السرية. 2. الإصدارات...

CVE-2021-27513-CVE-2021-27514

exploit-eyesofnetwork الإصدار 5.3.5 حتى 5.3.10 CVE-2021-27513 / CVE-2021-27514 يمكن أن يستغرق التخمين بالقوة وقتًا طويلاً جدًا في بيئة غير إنتاجية لأن "sessionid" يُنشأ في كل تسجيل دخول ولكن كل sessionid الذي يولده التطبيق صالح للإثبات، قمت بنشر حل EyesOfNetwork وحاكيت استخدامًا يوميًا مع 300 تسج...

CVE-2026-104469

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki- session cookie can reuse it after login to access private...

EUVD-2026-91480

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki- session cookie can reuse it after login to access private...

PT-2026-104279

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki- session cookie can reuse it after login to access private...

PT-2026-104036

Name of the Vulnerable Software and Affected Versions deeptutor version 1.4.0 Description An authorization bypass exists due to a user-controlled object identifier in the regenerate last turn function of TurnRuntimeManager. A remote caller can enumerate or obtain a session id to trigger the...

PT-2026-105800

Impact SSE sessions were keyed solely by a client-chosen session id with no binding to the authenticated user — a control the WebSocket transport has but that was dropped on SSE. An attacker who learns or a victim who leaks a session id could connect to the message endpoint and dispatch event...

EUVD-2026-89474

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover...

CVE-2026-71302

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover...

CVE-2026-79537

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference IDOR in the MCP transport session dispatch. The session store getSession in session-lifetime-manager.ts is keyed only by the client-supplied mcp-session-id header with no owner, namespace, or endpoint binding, and the...

CVE-2026-102600 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

CVE-2026-102600 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

CVE-2026-79537

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference IDOR in the MCP transport session dispatch. The session store getSession in session-lifetime-manager.ts is keyed only by the client-supplied mcp-session-id header with no owner, namespace, or endpoint binding, and the...