Code injection

IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 275116...

The vulnerability of the Bluetooth microprogramming software technology used in Apple’s Magic Keyboard allows a intruder to gain unauthorized access to Bluetooth traffic.

The vulnerability of the Bluetooth microprogramming software in Apple’s Magic Keyboard wireless keyboard relates to the management of user sessions. Exploiting this vulnerability could allow a hacker to gain unauthorized access to Bluetooth traffic...

FalconHound - A Blue Team Multi-Tool. It Allows You To Utilize And Enhance The Power Of Blo odHound In A More Automated Fashion

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool. One of the challenging aspects of BloodHound is that it is a snapshot in time...

CVE-2023-51059

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

Design/Logic Flaw

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

CVE-2023-51059

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

CVE-2023-51059

CVE-2023-51059 affects MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway, ≤ v1.1.1. The issue is in the session management of the administrative web interface, enabling remote privilege escalation. Connected sources consistently describe the vulnerability in the gateway’s web admin session handling...

MOKOSmart MKGW1 BLE Gateway Security Vulnerability

MOKOSmart MKGW1 BLE Gateway is a smart device from China's MOKOSmart that enables seamless connectivity and data management for Bluetooth devices via the IoT cloud platform. A security vulnerability exists in MOKOSmart MKGW1 BLE Gateway v.1.1.1 and earlier versions, which originates from a...

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

Session fixation

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

CVE-2024-0230

Summary (CVE-2024-0230): A session management issue in Apple Magic Keyboard is addressed by firmware update 2.0.6. With physical access to the accessory, an attacker may extract the Bluetooth pairing key and monitor Bluetooth traffic. Provided sources consistently cite the fix in Magic Keyboard F...

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

PT-2024-1415

Name of the Vulnerable Software and Affected Versions Magic Keyboard versions prior to 2.0.6 Description A session management issue was addressed with improved checks. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

About the security content of Magic Keyboard Firmware Update 2.0.6

About the security content of Magic Keyboard Firmware Update 2.0.6 This document describes the security content of Magic Keyboard Firmware Update 2.0.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation h...

Apple Magic Keyboard Security Flaw

The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...

Teleport: Improper session management - Failure to invalidate old session after password change

Failure to Invalidate Session on Password Change Failure to invalidate a session after a password change is a vulnerability which allows an attacker to maintain access on a service. Most users have the expectation that when they reset their password, no one else can access their account. When...

The vulnerability of the Bluetooth LE component of the microprogramming software for biometric locks, Ultraloq UL3 2nd Gen Smart Lock, allows a intruder to disclose the protected information.

The vulnerability of the Bluetooth LE component of the microprogrammed biometric lock Ultraloq UL3 2nd Gen Smart Lock is related to session management errors. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

MOKOSmart MKGW1 Gateway Improper Session Management

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 MOKOSmart MKGW1 Gateway Improper Session Management Link: https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220120-01MOKOSmartMKGW1GatewayImproperSessionManagement Vulnerability Overview MOKOSmart MKGW1 Gateway devices with firmwa...

PT-2023-32763 · Thecosy · Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS versions up to 2.0.1 Description: A critical vulnerability was found in Thecosy IceCMS, allowing remote attackers to manage user sessions. The manipulation affects unknown code and can be initiated remotely. The exploit has bee...

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in Thecosy IceCMS version 2.0.1, which stems from the presence of unknown code in the application that can be exploited by an attacke...