Lucene search
+L

23 matches found

Hacker One
Hacker One
•added 2015/04/27 10:52 a.m.•206 views

Shopify: SSL cookie without secure flag set

hello shopify security team, I have found security vulnerability. Vulnerable URL :- https://app.shopify.com/services/signup/track/ The following cookie was issued by the application and does not have the secure flag set: signupsessionid=0875b12b680173807271e6c444a964e8; path=/; expires=Mon, 04 Ma...

7AI score
SaveExploits0
Prion
Prion
•added 2012/08/23 10:32 a.m.•27 views

Session fixation

Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session SSL cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

5CVSS7AI score0.01354EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/23 12:00 a.m.•3 views

CVE-2010-5148: Undefined Security Weakness

Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session SSL cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

5CVSS5.9AI score0.01354EPSS
SaveExploits0References1
Rows per page
Query Builder