Sql injection

SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions...

CVE-2023-39582

SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions...

CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

SUSE CVE-2023-4583

When checking if the Browsing Context had been discarded in HttpBaseChannel, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox 117, Firef...

HOW TO | New network printers are not saving after re-logon

• The users are able to connect and add their network printers to their VDI sessions. However, after logoff the printer settings are not being retained within the user profile. • We would like to retain the network printer within the profile so that it is available for all subsequent logins...

FreeBSD : py-httpie -- exposure of sensitive information vulnerabilities (1e37fa3e-5988-4991-808f-eae98047e2af)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1e37fa3e-5988-4991-808f-eae98047e2af advisory. - Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpi...

Design/Logic Flaw

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

CVE-2023-41041 User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

PT-2023-4678 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S10 Junos OS versions 21.1R1 through 21. Junos OS versions 21.2 through 21.2R3-S5 Junos OS versions 21.3 through 21.3R3-S5 Junos OS versions 21.4 through 21.4R3-S7 Junos OS versions 22.1 through 22.1R3-S4 Jun...

Mouse & Keyboard might show Delay/Stops Working when using High DPI Mouse in Citrix sessions

Users using high DPI mouse and connect to a Citrix published desktop or applications both mouse and keyboard stops working. Sometimes mouse is working 4-5 seconds before it stops working. Users see a delay in Display update i.e. when moving Windows as the delay of up to 5-10 seconds after stoppin...

Sessions not logging out after enabling Shellbridge

Seamless sessions might not log off gracefully and leave sessions to be active in Citrix Studio or Citrix Director when using Citrix Virtual Apps and Desktops 2212 or later including Citrix Apps and Desktops 2402 LTSR. Starting with Citrix Virtual Apps and Desktops 2212 the Windows startup...

social-media-skeleton 代码问题漏洞

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A code issue vulnerability exists in social-media-skeleton versions prior to 1.0.5, which stems from not properly limiting the lifecycle of a user's sessio...

Exploit for Improper Input Validation in Microsoft

CVE-2023-36899 The CVE-2023-36899 vulnerability involves a b...

CVE-2023-4323

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

Input validation

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

The vulnerability of the Citrix Workspace App for Linux operating system, related to access control deficiencies, allows a intruder to gain access to user sessions.

The vulnerability of the Citrix Workspace App for Linux operating system is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to user sessions...

CVE-2023-38357

Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...

Session fixation

Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...

CVE-2023-38357

CVE-2023-38357 affects RWS WorldServer up to version 11.7.3, where session tokens have low entropy and can be enumerated, potentially granting unauthorized access to user sessions. Affected component is the session handling/token generation. The exploitation involves token enumeration leading to ...

Kirby 代码问题漏洞

Kirby is a file-based content management system CMS. A code issue vulnerability exists in Kirby versions 3.5.8.2 and earlier, 3.6.0 through 3.6.6.2, 3.7.0 through 3.7.5.1, 3.8.0 through 3.8.4, and 3.9.0 through 3.9.5, which arises from a change in a user's password by a user or site administrator...