CVE-2023-30806

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to...

CVE-2017-7144

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

CVE-2017-7144

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

CVE-2017-7144

The CVE-2017-7144 entry describes a privacy vulnerability in WebKit affecting iOS prior to 11 and Safari prior to 11, where cookie mishandling could allow remote attackers to track users in Safari Private Browsing. Connected documents confirm the affected component (WebKit) and the privacy impact...

PT-2017-17539

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11 Safari versions prior to 11 Description The issue involves the WebKit component and allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling. Recommendations For iOS versions prio...

CVE-2017-7144: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

Apple iOS cookie mishandling vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows a remote attacker to set a special cookie for the target device on the target website...

CVE-2007-4752

In OpenSSH versions prior to 4.7 , the ssh client fails to properly handle situations where an untrusted cookie cannot be created, resulting in the use of a trusted X11 cookie instead. This flaw allows an attacker to violate intended security policies and gain unauthorized privileges by causing a...