Transmission 4.0.0-4.1.2 - Permissive CORS Exposes RPC Session ID

Transmission 4.0.0 through 4.1.2 sends Access-Control-Allow-Origin: on RPC responses and advertises X-Transmission-Session-Id via Access-Control-Expose-Headers on the 409 session handshake. Any website a user visits can read the session-id nonce that guards against CSRF, enabling cross-origin...

CVE-2026-121419

SurrealDB versions 3.1.0 through 3.3.0 are vulnerable to an improper authentication vulnerability. The flaw exists because the MCP BoundSubject fingerprint utilizes the access method name rather than a unique per-user identity for JWT/Bearer access. This oversight allows an attacker possessing a ...

CVE-2026-13575 HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters,...

CVE-2026-13575 HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters,...

CVE-2026-13575

The HTTP::Session Perl module (versions before 0.54 ) is vulnerable to memcached command injection via the HTTP::Session::Store::CHI component. The root cause is the lack of input validation on session IDs received from client cookies; unlike the Memcached store, the CHI store fails to reject or ...

EUVD-2026-114833

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters,...

CVE-2026-120223

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223 Oray Pugongying X5 Pro Session ID session.lua session_get random values

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223 Oray Pugongying X5 Pro Session ID session.lua session_get random values

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223

A vulnerability exists in Oray Pugongying X5 Pro (up to version 7.6.1) within the Session ID Handler component. Specifically, the session_get function in the session.lua file is susceptible to the manipulation of the _user argument, which leads to the generation of insufficiently random values (C...

EUVD-2026-114809

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

CVE-2021-27513-CVE-2021-27514

exploit-eyesofnetwork Version 5.3.5 up to 5.3.10 CVE-2021-27513 / CVE-2021-27514 The brute-forcing can take a very long time on non production environement cause "sessionid" is created at every login but every sessionid generated by the app are valide for the PoC i deployed an EyesOfNetwork...

CVE-2026-120223: Oray Pugongying X5 Pro: A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

PT-2026-134896

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters,...

PT-2026-134886

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session get of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-13575: CRLF Injection

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. The session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters,...

CLEANSTART-2026-RB02560 WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authent...

Security vulnerability affects the apache-nifi package. A WebFlux application with a compromised subdomain for example, compromised via cross-site scripting XSS is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user...

CVE-2020-10199_POC-EXP

Affected versions + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version...

details-for-CVE-2022-46505

details-for-CVE-2022-46505 MatrixSSL session resume bug 1. Description of bug An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data. 2. Affected version MatrixSSL...