CVE-2021-40903

Exploit Title: Antminer Monitor 0.5.0 - Authentication Bypass CVE: CVE-2021-40903 Date: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Exploit Author: CQR.company / Vulnz. Vendor Homepage: https://github.com/anselal/antminer-monitor,...

CVE-2023-27524

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is running with an insecure default configuration CVE-2023-27524. The script checks if a Superset server's session cookies are signed with any well-known default Flask SECRETKEYs. The --validate flag can be...

Research-CVE-2023-27524

Research-CVE-2023-27524 The ASEAN Information Security Student Competition Jeopardy has temporarily concluded; my team MSECHUNT3R won second place in the Jeopardy bracket. I feel both happy and sad because this year's web challenge didn't meet my expectations, but anyway, I have a CVE to analyze ...

CVE-2026-21994

CVE-2026-21994 Summary Oracle OKIT oci-designer-toolkit version 0.3.0 contains two critical misconfigurations that chain into an unauthenticated full takeover. A hardcoded Flask SECRETKEY exposed in the public repository allows any attacker to forge a valid admin session cookie — no credentials...

EUVD-2026-113372

Nuxt dev server exposes generated appSecret through Vite file serving...

CVE-2026-118986

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand. The secret that signs session cookies is built from two calls to the built-in rand, which is seeded with 32 bits. The secret therefore has at most 232 possible values, and one signed...

CVE-2026-118986

CallBackery versions prior to 0.62.0 for Perl are vulnerable to session cookie forgery due to the use of a cryptographically weak pseudo-random number generator (CWE-338 ). The vulnerability stems from the signing secret being generated using two calls to the built-in rand() function, which is se...

EUVD-2026-113922

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand. The secret that signs session cookies is built from two calls to the built-in rand, which is seeded with 32 bits. The secret therefore has at most 232 possible values, and one signed...

CVE-2026-118986 CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand. The secret that signs session cookies is built from two calls to the built-in rand, which is seeded with 32 bits. The secret therefore has at most 232 possible values, and one signed...

PT-2026-133529

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand. The secret that signs session cookies is built from two calls to the built-in rand, which is seeded with 32 bits. The secret therefore has at most 232 possible values, and one signed...

CVE-2026-119201

Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in /app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs configuration. A client with direct HTTP access to an exposed development server c...

CVE-2026-119201

The Nuxt web development framework (versions 4.6.0 through 4.6.3) is vulnerable to an information disclosure flaw where the dev server exposes a generated appSecret file (typically located at .nuxt/app-secret). This occurs because the file is stored within a directory permitted by the Vite server...

CVE-2026-119201 Nuxt dev server exposes generated appSecret through Vite file serving

Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in /app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs configuration. A client with direct HTTP access to an exposed development server c...

CVE-2026-119201 Nuxt dev server exposes generated appSecret through Vite file serving

Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in /app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs configuration. A client with direct HTTP access to an exposed development server c...

CVE-2026-119201: nuxt: Nuxt is an open-source web development framework for Vue.js

Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in /app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs configuration. A client with direct HTTP access to an exposed development server c...

CVE-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection...

VulnCheck KEV: CVE-2026-61500

Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random generator and discloses outputs of the same generator to unauthenticated clients during login. A remote attacker can collect a small number of login responses, reconstruct the generator's...

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

CVE-2026-85181 CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

CVE-2026-85181 CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...