66624 matches found
PT-2026-113324
šØ CVE-2026-48382 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does...
PT-2026-113337
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...
PT-2026-113348
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Incorrect Authorization issue allows for arbitrary code execution within the context of the current user. This could enable an attacker to gain elevated access or control...
PT-2026-113344
Adobe Experience Manager is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...
Beyond Model Scaling: Rethinking Sequence Construction for Transformer-Based Network Intrusion Detection
Transformer-based network intrusion detection systems NIDS have shown strong potential for detecting multi-stage cyberattacks, yet most methods construct input sequences using fixed temporalization schemes rather than treating sequence construction as a systems design decision. In flow-based...
CVE-2024-34324
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NETSessionId cookie...
CVE-2024-34324
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows an attacker to perform a session hijacking attack . The vulnerability is caused by the ability to inject a crafted 24-character string into the ASP.NET_SessionId cookie. Exploitation details are not provided in the documents.
CVE-2026-108969: Incorrect Comparison
A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...
PT-2026-111637
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET SessionId cookie...
CVE-2026-83700: Use After Free
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
Quantum-Resilient Secure Protocol for Decentralized Edge-IoT Peer-To-Peer Energy Trading Systems
The rise of quantum computing presents substantial challenges to the security of Peer-to-Peer P2P energy trading systems. This paper introduces an innovative mutual authenticated session key agreement protocol aimed at protecting edge-IoT P2P energy trading communications in the quantum era. Each...
PT-2026-111343
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...
PT-2026-111349
Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulti...
PT-2026-111282
A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...
PT-2026-112504
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Now Playing Session Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an applicati...
PT-2026-111732
Name of the Vulnerable Software and Affected Versions FrankenPHP versions prior to 1.12.5 Description In worker mode, the application server may retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE PHP SESSION at compile...
PT-2026-112505
Name of the Vulnerable Software and Affected Versions Windows Now Playing Session Manager affected versions not specified Description A use-after-free condition exists in the Windows Now Playing Session Manager. This allows an authorized attacker to elevate privileges locally on the system...
Microsoft Windows: CVE-2026-83701: Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
