CVE-2026-103279

Ghost versions 3.10.0 before 6.34.0 are vulnerable to a session invalidation bypass . The application fails to fully invalidate all active sessions following a password change. This allows an attacker who has obtained a stolen session cookie to maintain unauthorized access to a user account even ...

CVE-2013-5413: Improper Authentication

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...