Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Vvveb CMS v1.0.6.1의 세션 고정 작성자: Andrew Paul 발견일: 2025년 6월 9일 공급업체: Vvveb 공급업체 URL: http://vvveb.com 공급업체 GitHub: https://github.com/givanz/Vvveb 영향받는 버전: 1.0.6.1 이전 버전도 포함될 가능성 높음 CVE ID: CVE-2025-8517 요약 Vvveb CMS 버전 1.0.6.1의 인증 메커니즘에서 CWE-384: 세션 고정으로 분류된 세션 고정 취약점이 발견되었습니다. 시스템이 성공적인 로그인 시 새로운 ...

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - リライトバルブを介したセッション固定化...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel CVE-2020-11819 および CVE-2020-15946 の概念実証です。Rukovoditel 2.4.x、2.5.x、2.6.1 でテスト済みです。 説明: このエクスプロイトには 2 つの実行モードがあります。セッション固定化の脆弱性 CVE-2020-15946 を利用する方法と、任意のプロファイルの任意のアカウントのアクセス認証情報を利用する方法です。 --type L オプションを使用すると、このスクリプトは悪意のあるリンクを作成します。被害者がブラウザでそのリンクにアクセスすると、任意のセッション ID...

CVE-2026-41839

CVE-2026-41839...

CVE-2025-15671

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account...

CVE-2025-15671

CVE-2025-15671 affects the Welcart e-Commerce WordPress plugin prior to version 2.12.1 . The plugin does not regenerate the session identifier upon authentication and instead sets it from the user-supplied uscesid request parameter. This allows an unauthenticated attacker to fixate a shop member'...

EUVD-2025-210759

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account...

CVE-2025-15671 Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account...

EUVD-2026-63221

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web...

BIT-GHOST-2026-70594 Ghost: Session Fixation in Ghost Admin

Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vulnerability on the same domain where Ghost Admin was hosted...

PT-2026-76834

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.6, Dokploy's user.update procedure in apps/dokploy/server/api/routers/user.ts updates account.password without deleting other rows from session, allowing a compromised better-auth.session token session to remain valid for ...

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

CVE-2026-72887

Net::OAuth::Client (Perl, before 0.32) silently downgrades OAuth 1.0a to OAuth 1.0 in get_request_token when the provider omits oauth_callback_confirmed, dropping oauth_verifier with no warning. This exposes affected applications to OAuth 1.0 session fixation: an attacker obtains a request token,...

EUVD-2026-59987

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

Linux Distros Unpatched Vulnerability : CVE-2026-72887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback...

CVE-2026-19748

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManagerParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...