CVE-2017-9822

DNN aka DotNetNuke before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 Critical Possible remote code execution on DNN sites."...

IBM Tivoli Federated Identity Manager Information Disclosure Vulnerability

IBM Tivoli Federated Identity Manager TFIM is a cross-enterprise federated identity management product from IBM, USA. The product provides Web and federated single sign-on capabilities SSO to users using multiple applications. An information disclosure vulnerability exists in IBM TFIM versions...

Vanno CMS latest version exists to bypass the change of administrative password vulnerability

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno CMS latest version exists to bypass the change admin password vulnerability. Attackers can use this vulnerability to change cookies to enter the background to change the...

CVE-2017-5042

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

VulnCheck KEV: CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

Mindoktor: Storing sensitive information on cookie post-registration

Hello, I've noticed that upon registering the server sets a cookie named clinicclinic.PENTESTFLASH. In it, it stores all the information the user used to register. Sample request: POST /user/register HTTP/1.1 Host: clinic.pentest.mindoktor.io User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.1...

ManageEngine ServiceDesk Plus uses an insecure method for cookie generation

Overview ManageEngine ServiceDesk Plus provided by Zoho Corporation is a help desk software. ManageEngine ServiceDesk Plus uses an insecure method for generating cookies. Akihito Mukai and Tomoshige Hasegawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

Django Cross-Site Request Forgery Vulnerability

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. Cross-site request forgery vulnerability exists in Django version 1.8 and 1.9. An attacker can...

SQL Injection Vulnerability in iGENUS Mail System of Aegisys Technology (Chengdu) Co.

iGENUS mail system based on the Linux platform mail system comprehensive management, using a Web-based graphical management interface multifunctional system. The product exists exists SQL injection vulnerability, the vulnerability URL is: http://target/login.php?Cmd=error&Code=, the vulnerability...

Tianrongxin TopSec Firewall Cookie Stack Buffer Overflow Vulnerability

TopSec is a firewall appliance from Skyrunner. A stack buffer overflow vulnerability exists in the HTTPS server of the Skyrun Firewall when processing the authid parameter in a cookie, where the return address is overwritten when the length of the parameter exceeds 60 bytes. An attacker exploited...

ReDoS via long string of semicolons

Overview Affected versions of tough-cookie may be vulnerable to regular expression denial of service when long strings of semicolons exist in the Set-Cookie header. Recommendation Update to version 2.3.0 or later. References GitHub Advisory...

CVE-2016-4326

The Chef Manage formerly opscode-manage add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie...

Multiple Vulnerabilities in Netgear GS105Ev2

The Netgear GS105Ev2 is a managed switch product from NetGear. Authentication bypass vulnerability, cross-site scripting vulnerability, cross-site request forgery vulnerability, information disclosure vulnerability, and predictable session cookie vulnerability exist in the Netgear GS105Ev2, which...

Mail.ru: [parapa.mail.ru] SQL Injection

Добрый день. Тип уязвимости - Time Based SQL Injection, Уязвимые параметры - куки parapauid и parapasid. Уязвимость воспроизводиться на многих страницах сайта, в том числе и на форуме. PoC GET /forums/ HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

Mail.ru: [cfire.mail.ru] Time Based SQL Injection

Добрый день. Уязвимо кукис с названием cfiresid. Рабочий PoC GET /account/userbar/ HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25 Host: cfire.mail.ru Accept: text/html, application/xml;q=0.9,...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2015-08316)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 43.0, which is caused by the program incorrectly storing a cookie with the vertical tab '\v', and can be exploited by a remot...

Instacart: Cookie-Based Injection

Hi Security Team instacart I'm Found Vulnerability Cookie-Based Injection It's may be possible to steal or manipulate session and cookies if attacker can injection XSS . details --- in path /help/ contain header in cookie paramter ahoyvisitor and ahoyvisit it's allow injection because re request...

The vulnerability of the CommVault Edge data archiving and restoration software allows a hacker to execute arbitrary commands.

The vulnerability of the CommVault Edge data archiving and recovery program exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...

IBM Security QRadar Incident Forensics Man-in-the-Middle Attack Vulnerability (CNVD-2015-07479)

IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and repair network security vulnerabilities. IBM Security QRadar Incident Forensics 7.2...