88 matches found
toxssin
toxssin 用途 toxssin 是一款开源渗透测试工具，用于自动化利用跨站脚本（XSS）漏洞的过程。它包含一个 HTTPS 服务器，该服务器作为恶意 JavaScript 载荷（toxin.js）所产生流量的解释器。 该项目最初（现在仍然是）一项基于研究的创意尝试，旨在探索 XSS 漏洞可能带来的利用深度，仅使用原生 JavaScript、受信任的证书和一些廉价技巧。 免责声明 ：在未经明确许可的情况下，使用本工具针对 Web 应用进行测试是违法的。您应对使用本工具可能引起的任何麻烦负责。 视频演示 https://www.youtube.com/watch?v=Z9I4UJUBr...
CVE-2026-66249
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers...
EUVD-2026-90816
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers...
CVE-2026-66249
The HCL iControl application is affected by a Missing Secure Attribute vulnerability. This flaw could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections , potentially leading to the unauthorized extraction of sensitive information, such as session identifiers . N...
CVE-2026-100379 Cross-request disclosure of CentralAuth cookies in Wikipedia Android App
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This issue affects Wikipedia Android App: main...
CVE-2026-100379 Cross-request disclosure of CentralAuth cookies in Wikipedia Android App
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This issue affects Wikipedia Android App: main...
CVE-2026-35140
HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability. The application fails to set the "secure" attribute on session cookies generated during authentication, which could allow a remote attacker to intercept network traffic and capture sensitive...
PT-2026-60466
HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability. The application fails to set the "secure" attribute on session cookies generated during authentication, which could allow a remote attacker to intercept network traffic and capture sensitive...
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute in the setSessionCookie process. An attacker can access sensitive session information by intercepting cookies transmitted over unsecured channels. Remediation There is no fixe...
CVE-2026-22617
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
CVE-2026-22617
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
CVE-2026-22617
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
PT-2026-33259
Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...
Eaton Intelligent Power Protector 安全漏洞
Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from insecure cookie configurations. This vulnerability may allow network-based attackers to intercept...
CVE-2026-5119
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential...
CVE-2022-26157
An issue was discovered in the web application in Cherwell Service Management CSM 10.2.3. The ASP.NETSessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels...
EUVD-2014-0935
Malware in sbrugna...
EUVD-2016-0386
Malware in sbrugna...