198 matches found
Directory Traversal
Overview @react-router/node is a Node.js platform abstractions for React Router Affected versions of this package are vulnerable to Directory Traversal via the createFileSessionStorage function. An attacker can access or modify files outside the intended session file directory by crafting a...
Directory Traversal
Overview @remix-run/deno is a Deno platform abstractions for Remix Affected versions of this package are vulnerable to Directory Traversal via the createFileSessionStorage function. An attacker can access or modify files outside the intended session file directory by crafting a malicious session...
GHSA-9583-H5HC-X8CW React Router has Path Traversal in File Session Storage
If applications use createFileSessionStorage from @react-router/node or @remix-run/node/@remix-run/deno in Remix v2 with an unsigned cookie, it is possible for an attacker to cause the session to try to read/write from a location outside the specified session file directory. The success of the...
React Router has Path Traversal in File Session Storage
If applications use createFileSessionStorage from @react-router/node or @remix-run/node/@remix-run/deno in Remix v2 with an unsigned cookie, it is possible for an attacker to cause the session to try to read/write from a location outside the specified session file directory. The success of the...
SiYuan 安全漏洞
SiYuan is a privacy-first personal knowledge management system from SiYuan Open Source. A security vulnerability exists in SiYuan 3.5.1 and prior versions that stems from the use of hard-coded encryption keys for session storage, which could lead to session hijacking...
📄 Magento SessionReaper Remote Code Execution
This Metasploit module exploits CVE-2025-54236 SessionReaper, a critical vulnerability in Magento/Adobe Commerce that allows unauthenticated remote code execution. The vulnerability stems from improper handling of nested deserialization in the payment method context, combined with an...
Exploit for CVE-2014-6324
AD Exploit Framework 🔴 CHỈ SỬ DỤNG CHO MỤC ĐÍCH HỌC TẬP VÀ...
EUVD-2018-13424
Malware in sbrugna...
EUVD-2018-11552
Malware in sbrugna...
EUVD-2020-6184
Malware in sbrugna...
EUVD-2020-0065
Malware in sbrugna...
EUVD-2022-5068
Malicious code in bioql PyPI...
EUVD-2025-25603
Malicious code in bioql PyPI...
EUVD-2024-52855
Malicious code in bioql PyPI...
EUVD-2022-5580
Malicious code in bioql PyPI...
EUVD-2025-14814
Malicious code in bioql PyPI...
EUVD-2024-41737
Malicious code in bioql PyPI...
EUVD-2024-52822
Malicious code in bioql PyPI...
EUVD-2024-26927
Malicious code in bioql PyPI...
[SECURITY] Fedora 42 Update: perl-Catalyst-Plugin-Session-0.44-1.fc42
This plugin is the base of two related parts of functionality required for session management in web applications. The first part, the State, is getting the browser to repeat back a session key, so that the web application can identify the client and logically string several requests together int...