Progress Sitefinity 9.1 XSS Vulnerability

Progress Sitefinity version 9.1 suffers from cross site scripting, broken session management, and open redirection vulnerabilities. ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed...

Progress Sitefinity 9.1 XSS / Session Management / Open Redirect

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed version: 10.1 CVE number: - impact: High homepage: http://www.sitefinity.com |...

Microsoft Office 365 Enterprise E3 Insufficient Session Expiration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2017-011 Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration CWE-613 Risk Level: Low...

GSA Bounty: The user, who was deleted from Github Organization, still can access all functions of federalist, in case he didn't do logout

Description Hi. I found a non-critical session management bug, which still can have serious impact in some scenarios. When user perform login to the Federalist through Github, federalist checks his Organization ID but only upon login. When the user was deleted from organization for some reasons,...

Multiple vulnerabilities in WePresent WiPG devices

Security Advisory: Multiple vulnerabilities in WePresent WiPG devices -------------------------------------------------------------------------------- 1. Summary This advisory describes multiple vulnerabilities affecting the WePresent WiPG devices. Most of the issues covered by this advisory appl...

WakaTime: Session not expired on logout

Description: Session management issue in https://wakatime.com Cookies are used to maintain session of the particular user and they should expire once the user logs out of his account.In secure web application,Cookies immediately expire once the user logs out of his account. But this is not...

WakaTime: Session Not Expired On Logout

Hi Wakatime Security Team, There is a session management vulnerability in your website. i.e. user's session is not expiring immediately after the logout. You can get more information of the vulnerability here -...

Cisco Prime Collaboration Provisioning Tool Session Hijacking Vulnerability

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. The vulnerability is due to insufficient session management during user authentication. An attacker could exploit this...

(0Day) Schneider Electric U.motion Builder Embedded Session ID Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of session management. The application has a hard-code...

OV3 Online Administration 3.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications OV3 Online Administration 3.0 Multiple Unauthenticated SQL Injection Vulnerabilities Vendor: novaCapta Software & Consulting GmbH Product web page: http://www.meacon.de Affected version: 3.0 Summary: With the decision to use the OV3 as a...

OV3 Online Administration 3.0 - SQL Injection

OV3 Online Administration 3.0 Multiple Unauthenticated SQL Injection Vulnerabilities Vendor: novaCapta Software & Consulting GmbH Product web page: http://www.meacon.de Affected version: 3.0 Summary: With the decision to use the OV3 as a platform for your data management, the course is set for...

Weblate: Improper Cookie expiration | Cookies Expiration Set to Future

Hi Team, I have found at many instances or places from signup till getting logged into application in domain "demo.weblate.org" that session maintaining cookies such as csrf token and session id's expiration dates are set to future date. As part of secure session management one should prohibit or...

NetGain EM 7.2.647 build 941 - Authentication Bypass Local File Inclusion

NetGain EM 7.2.647 build 941 - Authentication Bypass Local File Inclusion ''' Exploit Title: Add User Account with Admin Privilege without Login & Local File Inclusion Date: 2017-05-21 Exploit Author: f3ci Vendor Homepage: http://www.netgain-systems.com Software Link:...

Weblate: Design Flaw in session management of password reset

Hi team, I found that there is some design flaw in the website in Password reset functionality. This report is basically combination of two reports 223329 & 223339 those are already resolved but i bypass the fixes provided for. Issue 1: Bypass the Logout CSRF fix. Steps to reproduce/POC: 1. Login...

Paragon Initiative Enterprises: Broken Authentication & Session Management - Failure to Invalidate Session on all other browsers at Password change

Broken Authentication & Session Management - Failure to Invalidate Session on all other browsers at Password change ========================================================== Hello Team, While I was testing your web application "Paragon Initiative Enterprises", I came to know that it is vulnerabl...

Paragon Initiative Enterprises: no session logout after changing the password in https://bridge.cspr.ng/

no session logout after changing the password in https://bridge.cspr.ng/...

Weblate: Invalidate session after password reset - hosted website

Hey team, The Hosted Website doesn't invalidate session after the password is reset. It's one of the OWASP recommendations to terminate the session when a password is changed and force the user to re-login. Quote from OWASP: Renew the Session ID After Any Privilege Level Change The session ID mus...

httpd: Padding Oracle in Apache mod_session_crypto

It was discovered that the modsessioncrypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack...

Weblate: [hosted.weblate.org]Account Takeover

Hello Team, Steps to Reproduce: Go to Login Page Reset Your Password by Clicking Reset it. Put your email and answer the captcha. Go to your email and click your reset Link. You dont need to Change Your Password because you'll be logged in. Scenario Victim forgot to logout his/her Email Account o...

Design/Logic Flaw

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...