Sensitive Cookie in HTTPS Session Without "Secure" Attribute

Overview @grackle-ai/server is a Grackle server orchestrator — spawns and wires core gRPC, web-server HTTP, MCP, and PowerLine Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute in the session process. An attacker can intercept session...

GHSA-5J35-XR4G-VWF4 @grackle-ai/server has a Missing Secure Flag on Session Cookie

Impact The session cookie is set with HttpOnly; SameSite=Lax; Path=/ but does not include the Secure flag. This means the cookie will be sent over plain HTTP connections. Since the server binds to 127.0.0.1 by default and uses HTTP not HTTPS, this is acceptable for localhost use. However, when...

Microsoft Windows: Allow network connectivity during connected-standby (plugged in)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkactivitystandbyplugged.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow network connectivity during connected-standby plugged in Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...