CVE-2026-43910 Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

Summary When directConnecttrue is enabled, appium/java-client unconditionally accepts directConnectHost, directConnectPort, and directConnectPath from the server's NEWSESSION response and silently redirects all subsequent session traffic to the attacker-specified endpoint — with no allowlist, no...

NETAMS WNAM user management software Session Interception

The vulnerability of NETAMS WNAM user management software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to remotely intercept a session and gain control of another user’s control interface...

OpenBao JWT/OIDC Session Interception

The vulnerability of the JWT/OIDC authentication method of the OpenBao encryption system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to intercept a user’s session...

ROS-20260624-73-0012

The vulnerability in Python-Django relates to the possibility of sending a session cookie file. Exploiting this vulnerability could allow an attacker to intercept a user’s session...

ROS-20260529-73-0015

The vulnerability in openbao is related to improper session management. Exploiting this vulnerability can allow a remote attacker to intercept a user’s session...

Apache Airflow security vulnerabilities

Apache Airflow is the United States Apache Apache Foundation's set of open source platform with the creation, management and monitoring of workflow functions. The platform is characterized by scalability and dynamic monitoring. Apache Airflow suffers from a security vulnerability that stems from...

GLPI Improper Session Management Session Interception

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...

JetBrains Datalore Session Interception

The vulnerability of the data analysis platform JetBrains Datalore lies in the absence of the “secure” attribute in the cookie settings. Exploiting this vulnerability allows a remote attacker to intercept sessions...

n8n Session Interception

The vulnerability of the n8n automation platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain control of the user account remotely...

Tenda F3 Web Interface Session Interception

The vulnerability in the web-based interface for managing microprogrammed wireless routers Tenda F3 is related to improper session management. Exploiting this vulnerability can allow an attacker to intercept a user’s session...

IBM OpenPages Cache Poisoning

The vulnerability of IBM OpenPages, a risk management platform for enterprises, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to perform a cache poisoning attack or intercept sessions by sending specially crafted HTTP requests remote...

Transformation Extender Advanced Session Expiration

The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to intercept the session and gain access to the user...

EUVD-2025-30267

Malicious code in bioql PyPI...

EUVD-2024-41307

Malicious code in bioql PyPI...

Moodle Session Management

The vulnerability in the virtual learning environment Moodle is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...

Apache Tomcat Session Interception

The vulnerability of the Apache Tomcat application server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain access to the user account...

Condeon CMS Session Interception

The vulnerability of the Condeon CMS system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to intercept sessions and gain access to the user account...

Condeon CMS Information Disclosure

The vulnerability of the Condeon CMS system relates to the storage of confidential information in open text within the memory dump file. Exploiting this vulnerability could allow a malicious actor to intercept sessions and gain access to the user account...

UMI CMS Session Interception

The vulnerability of the UMI CMS content management system is related to the lack of measures taken to protect the website’s structure. Operating the system may allow a malicious actor, operating remotely, to intercept the administrator’s session by performing XSS attacks using a specially crafte...