CVE-2009-5051

Hastymail2 pre-RC8 is vulnerable: in HTTPS sessions the session cookie is not marked Secure, enabling potential interception of the cookie in transit. The OpenVAS entries describe a session-cookie security bypass; no concrete exploit details or patch/version fixes are provided in the supplied doc...

Piwik < 1.1.0 Multiple Vulnerabilities

Binary data 5743.prm...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

CVE-2011-0400 affects Piwik prior to 1.1. Cookie.php fails to set the secure flag on the session cookie in HTTPS sessions, enabling potential interception of the session cookie over HTTP. This is the nature and impact as described; no remediation details are provided in the referenced documents.

Fedora 14 : openconnect-2.26-4.fc14 (2010-18055)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

Fedora 13 : openconnect-2.26-2.fc13 (2010-18053)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

Fedora 12 : openconnect-2.26-1.fc12 (2010-18032)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

Even Without Browser Flaws, Attackers Have the Upper Hand on the Web

TORONTO–If the spate of vulnerabilities and sophisticated attacks against browsers in the last couple of years has done nothing else, it’s certainly shown just how vulnerable users are as they go about their daily business on the Web. In a talk at the SecTor conference, a researcher showed severa...

Cag CMS Version 0.2 <= XSS & Blind SQL Injection Multiple

Exploit for php platform in category web applications ========================================================= Cag CMS Version 0.2 = XSS & Blind SQL Injection Multiple ========================================================= Author : Shamus Date : October, 05th 2010 Location : Solo && Jogjakart...

Cag CMS 0.2 - Cross-Site Scripting Blind SQL Injection

Cag CMS 0.2 - Cross-Site Scripting Blind SQL Injection ----------------------------------------------------------------------------------------- Cag CMS Version 0.2 Beta = XSS && Blind SQL Injection Multiple Vulnerabilities...

Cag CMS 0.2 Blind SQL Injection / Cross Site Scripting

----------------------------------------------------------------------------------------- Cag CMS Version 0.2 Beta = XSS && Blind SQL Injection Multiple Vulnerabilities ----------------------------------------------------------------------------------------- Author : Shamus Date : October, 05th...

Novell eDirectory < 8.8 SP5 Patch 4 Multiple Vulnerabilities

The remote host is running eDirectory, a directory service software from Novell. The installed version of this software is affected by one or more of the following vulnerabilities : - A denial of service vulnerability in NDSD when handling a malformed verb. Bug 571244 - A stack-based buffer...

Ubuntu Update for xorg-server vulnerabilities USN-939-1

Ubuntu Update for Linux kernel vulnerabilities USN-939-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9391.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for xorg-server vulnerabilities USN-939-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2009-4873

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service server crash or execute arbitrary code via a long Session cookie...

Stack overflow

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service server crash or execute arbitrary code via a long Session cookie...

CVE-2009-4873

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service server crash or execute arbitrary code via a long Session cookie...

Novell eDirectory <= 8.8.5 Cookie Hijack Vulnerability

Novell eDirectory is prone to a session cookie hijack vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...