CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML authentication bypass Unauthenticated session forgery on Citrix NetScaler ADC / NetScaler Gateway via the SAML HTTP-Redirect binding handler at GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Bulletin CTX696939 2026-08-19, no workarounds. Credit for the...

CVE-2026-41940

CVE-2026-41940 – cPanel/WHM Auth Bypass + Root Password Changer This script exploits an authentication bypass vulnerability in cPanel/WHM CVE-2026-41940 using a CRLF injection technique to forge an administrator session. Once successful, the script can change the root user's password in WHM and...

cpanel-sessionscribe

SessionScribe - CVE-2026-41940 Critical unauthenticated RCE in cPanel & WHM. Four HTTP requests forge a root session via CRLF injection into the password field of a preauth session. No auth, no preconditions, every supported tier affected. Disclosed 2026-04-28 by Sina Kheirkhah / watchTowr Labs...

CVE-2026-61500

CVE-2026-61500: Rejetto HFS session forgery to RCE CVE-2026-61500 is an unauthenticated session-forgery vulnerability in Rejetto HFS 3.0.0 through 3.2.0. HFS generated its Koa session-cookie signing key with JavaScript Math.random and exposed outputs from the same V8 PRNG in the unauthenticated S...

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

Gogs_RCE

GogsRCE Vulnerability Reproduction 0x01 Register a Regular Account on the Frontend 0x02 Compile a Forged Admin Session Using Go go run main.go package main import "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" func EncodeGobobj mapinterfaceinterface byte, error for , v := range obj...

CVE-2023-27524-POC

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is vulnerable to CVE-2023-27524 and if it is vulnerable then, forge a session cookie with the userid = 1 which is usually the admin user allowing for authentication bypass and gaining access to the dashboard...

CVE-2026-64682

AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value readable in the published package can forge a valid...

CVE-2026-64682 AstroBlocks: Admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name

AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value readable in the published package can forge a valid...

CVE-2026-64682

AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value readable in the published package can forge a valid...

CVE-2026-64682

The AstroBlocks block-first CMS (prior to version 3.4.0 ) is vulnerable to forged admin session tokens. The root cause is a hard-coded fallback JWT secret combined with a mismatched environment variable name , allowing an attacker to use a publicly readable fallback value from the published packa...

CVE-2026-64682: NauelG astro-blocks: AstroBlocks is a block-first CMS for Astro projects

AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value readable in the published package can forge a valid...

CVE-2026-107243

The Node.js web service on VOS previously Versa FlexVNF is used for URL-based Zero Touch Provisioning ZTP of the VOS appliance and is not required after provisioning is complete. The express-session middleware in server.js is configured with a hardcoded secret that is identical across all VOS...

PT-2026-141238

The Node.js web service on VOS previously Versa FlexVNF is used for URL-based Zero Touch Provisioning ZTP of the VOS appliance and is not required after provisioning is complete. The express-session middleware in server.js is configured with a hardcoded secret that is identical across all VOS...

CVE-2026-123317

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies...

CVE-2026-123317

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies...

CVE-2026-123317

In JetBrains Ktor versions prior to 3.6.1 , a session forgery vulnerability exists. The root cause is an improper validation of integrity check values (CWE-354) within encrypted session cookies , allowing attackers to forge sessions via tampered cookies. This vulnerability has a High severity rat...

EUVD-2026-118081

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies...

CVE-2026-123317: JetBrains Ktor: In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies...

GHSA-3XF4-9G3C-4H4W Nuxt dev server exposes generated appSecret through Vite file serving

Impact When no appSecret is configured via NUXTAPPSECRET, NITROAPPSECRET or runtimeConfig.appSecret, nuxt dev generates a development secret and stores it in /app-secret by default .nuxt/app-secret. The build directory is inside the directories that Nuxt passes to Vite's server.fs.allow, so the...