CVE-2023-30306: Undefined Security Weakness

An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30311: Uncontrolled Resource Consumption

An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30313: Undefined Security Weakness

An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309: Undefined Security Weakness

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

Multiple TP-LINK products have security vulnerabilities

The TP-LINK TL-R473GP-AC is an all-in-one Gigabit VPN router from China P&L TP-LINK. A security vulnerability exists in multiple TP-LINK products, which stems from a vulnerability that allows an attacker to hijack TCP sessions, potentially resulting in a denial-of-service attack. The following...

CVE-2023-30312

An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...

PT-2024-12225 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 affected versions not specified Description: An issue in Linksys E5600 routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information about a...

PT-2024-12228 · Ruijie · Ruijie Eg105G +3

Name of the Vulnerable Software and Affected Versions: Ruijie EG210G-P affected versions not specified Ruijie EG105G-V2 affected versions not specified Ruijie NBR affected versions not specified Ruijie EG105G affected versions not specified Description: An issue in the mentioned Ruijie routers...

PT-2024-12229 · Comfast · Comfast Cf-616Ac

Name of the Vulnerable Software and Affected Versions: Comfast CF-616AC affected versions not specified Description: An issue in Comfast CF-616AC routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information...

GHSA-4QX8-J9VH-2628 silverstripe/framework's User-Agent header not correctly invalidating user session

A security protection device in Session designed to protect session hijacking was not correctly functioning. This function intended to protect user sessions by detecting changes in the User-Agent header, but modifications to this header were not correctly invalidating the user session...

PT-2024-40078 · Session · Session

Name of the Vulnerable Software and Affected Versions: Session affected versions not specified Description: A security protection mechanism in Session, designed to prevent session hijacking, was not functioning correctly. This mechanism aimed to protect user sessions by detecting changes in the...

JA4+ - Suite Of Network Fingerprinting Standards

JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware detection, session...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

Session Hijacking

friendsofsymfony/user-bundle is vulnerable to session hijacking. The vulnerability is due to inadequate session management, which could allow an attacker to take over a users session...

Session Hijacking

illuminate/auth is vulnerable to Session Hijacking. The vulnerability is due to insecure handling of "remember me" cookies, where previously hijacked cookies would remain valid even after the user's password was reset or they logged out...

PHP Cookie Session Interception

The vulnerability of the PHP programming language interpreter relates to the incorrect processing of cookie files, resulting from replacing spaces, periods, and open parentheses with underscores. Exploiting this vulnerability can allow an attacker to intercept sessions and gain unauthorized acces...

Session Hijacking

laravel/socialite is vulnerable to Session Hijacking. The vulnerability is due to the state guessing during OAuth authentication, which could potentially lead to session hijacking...

GHSA-7FJV-25Q9-2W88 State Guessing Vulnerability in laravel/socialite

laravel/socialite versions prior to 2.0.10 are susceptible to a security vulnerability related to state guessing during OAuth authentication. This vulnerability could potentially lead to session hijacking, allowing attackers to compromise user sessions. The issue has been addressed and fixed in...

State Guessing Vulnerability in laravel/socialite

laravel/socialite versions prior to 2.0.10 are susceptible to a security vulnerability related to state guessing during OAuth authentication. This vulnerability could potentially lead to session hijacking, allowing attackers to compromise user sessions. The issue has been addressed and fixed in...

FOSUserBundle Session Hijacking Vulnerability

Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks...