USN-4561-1 ruby-rack vulnerabilities

It was discovered that Rack incorrectly handled certain paths. An attacker could possibly use this issue to obtain sensitive information. CVE-2020-8161 It was discovered that Rack incorrectly validated cookies. An attacker could possibly use this issue to forge a secure cookie. CVE-2020-8184...

Hardcoded credentials

Use of a hard-coded cryptographic key in Pancake versions 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation...

PT-2020-5866 · Php +9 · Php +9

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.33 PHP versions 7.3.x through 7.3.22 PHP versions 7.4.x through 7.4.10 Description: The issue is related to the processing of incoming HTTP cookie values in PHP, where cookie names are url-decoded. This may lead...

Logic Flaw Vulnerability in Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a logic flaw vulnerability that can be exploited by attackers to forge an administrator cookie to log into the backend...

Information Disclosure

The pcs packages provide a command-line tool and a web UI to configure and manage the Pacemaker and Corosync tools. It was found that the pcs daemon did not sign cookies containing session data that were sent to clients connecting via the pcsd web UI. A remote attacker could use this flaw to forg...

Logic Flaw Vulnerability in Juhaoyong CMS

JuhaoyongCMS is a set of cms developed by Juhaoyong Enterprise Website Management System. Juhaoyong CMS has a logic flaw vulnerability, an attacker can be forged through a cookie to log in to the backend without an account password...

Buffalo routing product suffers from a generic cookie spoofing login vulnerability

Buffalo is a router manufactured by an American company. A generic cookie forgery login vulnerability exists in Buffalo routing products, which can be exploited by an attacker to modify cookie information, bypass login authentication to log in to the WEB console, and gain control of the router...

Logic design flaws in Howay series wireless controller login system

Howay series wireless controllers are wireless controllers independently developed by Hanming Technology Co., Ltd. with the features of large management AP capacity, strong processing performance and rich functional characteristics. A logical design vulnerability exists in the login system of How...

YouYaX论坛前台任意账户登入（cookie伪造）漏洞

No description provided by source...

pcs: improper web session variable signing

It was found that the pcs daemon did not sign cookies containing session data that were sent to clients connecting via the pcsd web UI. A remote attacker could use this flaw to forge cookies and bypass authorization checks, possibly gaining elevated privileges in the pcsd web UI...

pcs: improper web session variable signing

It was found that the pcs daemon did not sign cookies containing session data that were sent to clients connecting via the pcsd web UI. A remote attacker could use this flaw to forge cookies and bypass authorization checks, possibly gaining elevated privileges in the pcsd web UI...

pcs: improper web session variable signing

It was found that the pcs daemon did not sign cookies containing session data that were sent to clients connecting via the pcsd web UI. A remote attacker could use this flaw to forge cookies and bypass authorization checks, possibly gaining elevated privileges in the pcsd web UI...

PHP Hash compare the presence of defects, the impact of a large number of Web site login authentication, Forgot Password and other business-critical-vulnerability warning-the black bar safety net

! The recent one is called“Magic Hash”PHP vulnerability may allow an attacker to illicitly obtain user account information. The vulnerability cause is PHP in a particular way the process is hash the string, the attacker can use its from to try and may get the password, bypassing the login...

ESPCMS 权限限定绕过直接登录后台(DEMO站测试通过)

简要描述： ESPCMS 权限限定绕过直接登录后台 仅测试了 最新版本 然后demo测试进去看了一眼，别的什么也没做。 详细说明： 先看下 后台验证的代码 function softbase$adminpurview = false header"Content-Type: text/html; charset=utf-8"; $this-dbmysql; $this-commandinc; $this-systemfile; $this-cachedb; if $adminpurview $this-adminpurview; $this-sitelng = $this-getlng;...

Tastydir <= 1.2 (1216) Multiple Vulnerabilities

No description provided by source. Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP fil...

Analysis WordPress 3.8.2 fix cookie forgery vulnerability-vulnerability warning-the black bar safety net

Recent blog encounter a lot of issues, wordpress updates are also very frequent, and stumbled on this article out to share with you, the following is the article content: 4 on 8 December,wordpress released an important update, in this update, fixes a series of security vulnerabilities. One of the...

WordPress cookie forgery vulnerability detailed analysis and exp-vulnerability warning-the black bar safety net

0×0 0 Preface This article The analysis is in wordpress3. 8. 2 update fixes the cookie falsification Vulnerability, CVE-2 0 1 4 - 0 1 6 6, and is given corresponding to exp. According to the description in WordPress before 3.7.2 and 3.8. x before 3.8.2 are affected, A local installation of...

Katello: Application.config.secret_token is not generated properly

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secrettoken value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary...

Tastydir <= 1.2 (1216) Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== Tastydir = 1.2 1216 Multiple Vulnerabilities =============================================== Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version...

Tastydir 1.2 (1216) - Multiple Vulnerabilities

Tastydir 1.2 1216 - Multiple Vulnerabilities Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platfo...