Authentication flaw

An issue in H v1.0 allows attackers to bypass authentication via a session replay attack...

CVE-2022-29334

An issue in H v1.0 allows attackers to bypass authentication via a session replay attack...

CVE-2022-29334

CVE-2022-29334 describes an authentication bypass in the H v1.0 platform via a session replay attack. The affected component is the H authentication/session handling (H v1.0). The publicly documented impact is bypass of authentication through replayed sessions, with high-severity implications ind...

PT-2022-19550 · H · H

Name of the Vulnerable Software and Affected Versions: H version 1.0 Description: The issue allows attackers to bypass authentication via a session replay attack. Recommendations: For H version 1.0, consider implementing additional authentication measures to prevent session replay attacks until a...

H 授权问题漏洞

H is a powerful asset collection and management platform. It is mainly used for src information collection and red and blue confrontation asset collection use. A security vulnerability exists in H v1.0, which can be exploited by an attacker to bypass authentication by performing a session replay...

CVE-2021-34739

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This...

Cisco Small Business 代码问题漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a code issue vulnerability due to the Cisco switch's session credential authentication mechanism. An attacker could exploit this vulnerability to replay valid user session credentials and log into the web management...

Unspecified Vulnerability in PHP-Fusion

PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. PHP-Fusion suffers from a security vulnerability that stems from a session cookie not being deleted when a user lo...

CVE-2020-23178

An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user...

CVE-2020-23178

An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user...

CVE-2020-23178

An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user...

PHP-Fusion 安全漏洞

PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. PHP-Fusion suffers from a security vulnerability that stems from a session cookie not being deleted when a user lo...

Intel Sued Under Wiretapping Laws for Tracking User Activity on its Website

Intel is being sued under a Florida state wiretapping law for using software on its website to capture keystrokes and mouse movements of people that visit it. The case is one of many that private citizens have brought against companies to dispute their use of session-replay technology. A...

Visma Public: Session replay vulnerability in app.workbox.dk domain

The researcher found that sessions don't expire when users logs out of their account. This means that if the session cookie and it's value is known, an attacker can impersonate the owner of the account...

BSA-2019-783

Security Advisory ID : BSA-2019-783 Component : VPN Revision : 1.0: Final Virtual Private Networks VPNs are used to create a secure connection with another network over the internet. Multiple VPN applications store the authentication and/or session cookies insecurely in memory and/or log files...

CVE-2019-11213

In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. The endpoint would need to be already compromised for exploitation to succeed...

CVE-2019-1573

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN...

Protect Your Online Privacy with the New Trend Micro Zero Browser

In the digital age, your personal data and online behavior is increasingly being tracked whenever you browse, search, watch the news, use social networks, purchase goods, or manage your accounts online. Trend Micro, with nearly 30 years of experience in the security industry, is acutely aware of...

Websites Use Session-Replay Scripts to Eavesdrop on Every Keystroke and Mouse Movement

The security researchers at Princeton are posting You may know that most websites have third-party analytics scripts that record which pages you visit and the searches you make. But lately, more and more sites use "session replay" scripts. These scripts record your keystrokes, mouse movements, an...

Over 400 Popular Sites Record Your Every Keystroke and Mouse Movement

How many times it has happened to you when you look for something online and the next moment you find its advertisement on almost every other web page or social media site you visit? Web-tracking is not new. Most of the websites log its users' online activities, but a recent study from Princeton...