cookiescanner

cookiescanner 用于检查多个站点中 cookie 标记的工具。 简介 该工具旨在简化当我们分析多个 Web 服务器时检查 cookie 标记的过程。 想知道为什么这个工具可能有用吗？ https://www.owasp.org/index.php/SecureFlag https://www.owasp.org/index.php/HttpOnly https://www.owasp.org/index.php/Testingforcookiesattributes%28OTG-SESS-002%29 用法 用法: cookiescanner.py 选项 示例:...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

CVE-2020-26732

CVE-2020-26732 SKYWORTH GN542VF 硬件版本 2.0 和软件版本 2.0.0.16 在 HTTPS 会话中未为会话 cookie 设置 Secure 标志 描述 SKYWORTH GN542VF 硬件版本 2.0 和软件版本 2.0.0.16 在 HTTPS 会话中未为会话 cookie 设置 Secure 标志，这使得远程攻击者更容易通过在 HTTP 会话中拦截其传输来捕获此 cookie。 附加信息 应仔细审查每个 cookie，以确定它是否包含敏感数据或是否用于安全决策。如果可能，请确保所有通信都通过加密信道进行，并为所有会话 cookie...

CVE-2026-80255

A flaw was found in curl. When a Set-Cookie: header uses a tab character instead of a space before the Secure attribute, curl incorrectly stores the cookie without the Secure flag. This can lead to information disclosure, as the cookie may then be sent over unencrypted HTTP connections to the sam...

SUSE CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the Set-Cookie header parsing process. An attacker can cause cookies to be stored without the Secure flag by injecting a horizontal tab character before the Secure attribute, which may result in those cookies...

CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

ALPINE-CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

AZL-99864 CVE-2026-80255 affecting package rust 1.90.0-10

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

AZL-99828 CVE-2026-80255 affecting package rust 1.75.0-31

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

AZL-99810 CVE-2026-80255 affecting package mysql 8.0.46-1

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

CVE-2026-80255 secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

EUVD-2026-72151

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

PT-2026-84657

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A flaw exists where using a horizontal tab ASCII code 9 instead of a space ASCII code 32 immediately before the Secure attribute in a Set-Cookie: header causes the software to store the cookie...

CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

PT-2026-70889

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue...

CVE-2026-15656

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

CVE-2026-15656

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

Improper Neutralization

Overview org.webjars.npm:undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Improper Neutralization via unsanitized domain handling and unparsed attribute serialization in lib/web/cookies/util.js. An attacker can inject or overrid...