1723 matches found
Siemens Unlocked JTAG Interface / Buffer Overflow
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unlocked JTAG interface and buffer overflow product: Siemens SM-2558 Protocol Element extension module for Siemens SICAM AK3/TM/BC, Siemens CP-2016 & CP-2019 vulnerable...
K000148768: Curl vulnerability CVE-2024-0853
Security Advisory Description curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status...
CVE-2024-37783
A reflected cross-site scripting XSS vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at /portal/ForgotPassword.aspx...
Gladinet CentreStack 安全漏洞
Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack version v13.12.9934.54690. An attacker exploiting this vulnerability could inject malicious JavaScript into a...
Session Fixation
org.keycloak:keycloak-services is vulnerable to Session Fixation. The vulnerability is due to the session ID and JSESSIONID cookie not being changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured, allowing an attacker to hijack the session before authentication...
PT-2024-39235 · Unknown · Code-Projects Crud Operation System
Name of the Vulnerable Software and Affected Versions: code-projects Crud Operation System version 1.0 Description: A critical issue has been found in the code-projects Crud Operation System, affecting an unknown part of the file /updatedata.php. The manipulation of the sid argument leads to SQL...
Session Fixation
Keycloak is vulnerable to session fixation. The vulnerability is due to improper session management, as the session ID and JSESSIONID cookie are not updated upon login, allowing attackers to hijack a session before authentication and trigger session fixation...
CVE-2024-7341
CVE-2024-7341 describes a session fixation flaw in Keycloak’s SAML adapters (Elytron SAML) where the session ID and JSESSIONID cookie are not rotated on login, even with turnOffChangeSessionIdOnLogin enabled. This allows an attacker who hijacks the current session before authentication to trigger...
PT-2024-38275 · Red Hat · Keycloak Saml Adapters +1
Name of the Vulnerable Software and Affected Versions: Keycloak SAML adapters affected versions not specified Description: A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the...
Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversal", 'Description' = %q This module exploits a directory...
AUO DIR-860L Buffer Overflow Vulnerability
The AUO DIR-860L is a wireless router from China's AUO that supports the Wi-Fi 5 standard and offers dual-band 2.4GHz and 5GHz network connectivity with a maximum transmission speed of up to 1200 Mbps.The device has a built-in antenna and comes with one USB 3.0 port and four Gigabit wired ports. ...
Exploit for CVE-2024-22120
Usage bash python exploit.py --ip --sid --hostid --phps...
CBL Mariner 2.0 Security Update: curl (CVE-2024-0853)
The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0853 advisory. - curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapli...
CVE-2024-4447
In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...
DotCMS 安全漏洞
DotCMS is an open source content management system written in Java by DotCMS, Inc. for managing content and content-driven sites and applications. A security vulnerability exists in DotCMS. An attacker exploiting the vulnerability could mimic other users by session ID...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Follow-Redirects_Project Follow-Redirects
CVE-2022-0155 Proof-of-Concept PoC This repository contains...
CVE-2024-36450
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...
CVE-2024-36450
Webmin is affected by CVE-2024-36450 due to a cross-site scripting flaw in sysinfo.cgi present in Webmin versions prior to 1.910. Exploitation can cause arbitrary scripts to run in the victim’s browser, with potential session ID exposure, webpage alteration, or server disruption. The vulnerabilit...
CVE-2024-36450
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...
ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...