evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

evilginx2

Evilginx 3.0 Evilginx 是一种中间人攻击框架，用于窃取登录凭据以及会话 Cookie，从而能够绕过双因素认证保护。 该工具是 2017 年发布的 Evilginx 的继承者，原版使用了自定义版本的 nginx HTTP 服务器来提供中间人功能，充当浏览器与被钓鱼网站之间的代理。当前版本完全用 GO 编写，作为独立应用程序运行，实现了自己的 HTTP 和 DNS 服务器，使得设置和使用极其简单。 免责声明 我非常清楚 Evilginx 可能被用于恶意目的。这项工作仅用于展示熟练攻击者能够做到什么。防御者有责任考虑此类攻击，并设法保护其用户免受这类钓鱼攻击。Evilgin...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

heartbleed

Heartbleed Bug Descripción del escenario El fallo Heartbleed es un ejemplo de un ataque de ciberseguridad que explota una vulnerabilidad en la biblioteca OpenSSL. Brevemente, un paso de validación faltante en la biblioteca OpenSSL podría permitir a un hacker acceder a información sensible en un...

CVE-2025-48461

CVE-2025-48461 可预测的会话cookie，可通过暴力破解获得对Advantech WISE门户的未授权访问 摘要 在检查Advantech WISE-4060 web门户时，我发现用于认证到web门户的会话cookie遵循模式60D01EXXXXX。这使得任何未授权的攻击者能够生成所有会话cookie的所有可能排列，并对门户进行暴力破解攻击，以找到用于认证到web门户的有效会话cookie。此漏洞是在由CSA（新加坡网络安全局）组织的SPIRICYBER-24 IoT/OT黑客马拉松期间发现的。 影响 任何未经授权的用户都能以管理员用户身份进行认证，并修改Advantech...

Flask-Unsign

Flask Unsign Herramienta de línea de comandos para obtener, decodificar, descifrar por fuerza bruta y manipular cookies de sesión de una aplicación Flask adivinando claves secretas. Para el componente independiente de lista de palabras, visita el repositorio flask-unsign-wordlist. Requisitos Pyth...

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

SummaryWhen more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callable...

Rocky Linux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1776682775)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776682775 advisory. - A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted i...

CVE-2015-9251

CVE-2015-9251 [email protected] 针对 jQuery 低于 3.0.0 版本的 CVE-2015-9251 概念验证（PoC）。 CVE-2015-9251 - PoC 漏洞利用 此仓库包含 CVE-2015-9251 漏洞在 jQuery 库中的 概念验证 PoC 。该漏洞允许通过未经过滤的 JSONP 调用实施跨站脚本（XSS）攻击，原因在于 jQuery 在 3.0.0 之前版本中允许在 callback 参数中注入代码。 描述 CVE-2015-9251 影响 jQuery 3.0.0 之前版本。该漏洞通过操控 JSONP 请求中的...

CVE-2026-52749

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2026-52749

The Kaon AR2140X router is vulnerable to an authentication bypass because it improperly issues session cookies in responses to unauthenticated HTTP requests. This flaw allows a remote attacker to obtain a valid session identifier without credentials. Once authenticated, an attacker can perform un...

EUVD-2026-88247

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2026-52749 Improper Authentication in Kaon AR2140X

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2026-52749 Improper Authentication in Kaon AR2140X

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2023-48084

CVE-2023-48084 Corrige la sintaxis rota en el POC, principalmente importaciones incorrectas y referencias incorrectas a funciones de la API. Automatiza la obtención del APIToken, almacena el token como una variable y lo canaliza al POC corregido. https://github.com/Hamibubu/CVE-2023-48084 Si por...

CVE-2026-52749: Improper Authentication

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2019-5420.rb

CVE-2019-5420.rb 使用 Ruby 编写的 POC 漏洞利用程序 从目标应用获取你的 Cookies 并填入脚本，然后通过 ruby ./exploit.rb 运行。...

CVE-2026-100635

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid publish-visitor-session-id cookie from a Basic Auth exchange...

EUVD-2026-87729

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid publish-visitor-session-id cookie from a Basic Auth exchange...

PT-2026-97804

Name of the Vulnerable Software and Affected Versions Aureus ERP versions prior to 1.6.1 Description The application stores uploaded SVG files on its public disk and serves them from the application origin. This allows authenticated users to upload malicious SVG files containing JavaScript...