EUVD-2006-3202

Malware in sbrugna...

EUVD-2022-2168

Malicious code in bioql PyPI...

Nepstech NTPL-XPON1GFEVN 安全漏洞

The Nepstech NTPL-XPON1GFEVN is a wireless router from Nepstech. A security vulnerability exists in Nepstech NTPL-XPON1GFEVN v1.0. An attacker can exploit the vulnerability to obtain sensitive information via the parameters of a cookie...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker can exploit the vulnerability to execute arbitrary code via the username, password and language cookie parameters...

PT-2023-22370 · Vade Secure · Vade Secure Gateway

Name of the Vulnerable Software and Affected Versions: Vade Secure Gateway affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. This enables the attacker to perform...

Concrete CMS missing secure cookie parameters

Concrete CMS previously concrete5 before 9.2 does not have Secure and HTTP only attributes set for ccmPoll cookies...

SUSE CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

SUSE CVE-2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

phpMyAdmin CSS Injection Vulnerability

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

GHSA-FVH3-4V5R-CVVC Improper Authentication in Mortbay Jetty

Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors...

Unspecified vulnerability in Carinal Tien Hospital Health Report System

Carinal Tien Hospital Health Report System 耕莘醫院健检報告查询系統 is a hospital health report query system of Keng Hsien Hospital in Taiwan, China. A security vulnerability exists in the Carinal Tien Hospital Health Report System, which can be exploited by an attacker to gain access to other users without...

CVE-2021-22856

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege...

Moxa OnCell G3100-HSPA Series Authentication Bypass Vulnerability

The Moxa OnCell G3100-HSPA is an intelligent, feature-rich wireless communications platform that enables networked and serial devices to connect to cellular TCP/IP networks. An authentication bypass vulnerability exists in the Moxa OnCell G3100-HSPA Series that stems from an application allowing...

DEBIAN-CVE-2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

UBUNTU-CVE-2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

Design/Logic Flaw

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

CVE-2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

phpMyAdmin 4.0.x < 4.0.10.19, 4.4.x < 4.4.15.10, 4.6.x < 4.6.6 Multiple Vulnerabilities - Linux

phpMyAdmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin";...

CSS injection in themes

PMASA-2017-4 Announcement-ID: PMASA-2017-4 Date: 2017-01-24 Summary CSS injection in themes Description It was possible to cause CSS injection in themes by crafted cookie parameters. Severity We consider this to be non critical. Affected Versions All 4.6.x versions prior to 4.6.6, 4.4.x versions...

RelateIQ: Value of JSESSIONID and XSRF token parameter in cookie remains same before and after login

Here are two same values captured via intercepting the request and the value of JSESSIONID and XSRF remains same before and after login JSESSIONID=m8u0pm8mjvckm1ya8da4oqlfb0pd34iw38lr; XSRF-TOKEN=6B025F41D13BC02E9D658409BAC23F84; This could lead to further threats such as session hijacking etc...