36733 matches found
CVE-2026-70554
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attacker-controlled serialized data in the maxsitecomuser cookie directly to unserialize without validation or class allowlisting. Attackers can craft a malicious...
CVE-2026-70554 MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attacker-controlled serialized data in the maxsitecomuser cookie directly to unserialize without validation or class allowlisting. Attackers can craft a malicious...
CVE-2026-70554 MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attacker-controlled serialized data in the maxsitecomuser cookie directly to unserialize without validation or class allowlisting. Attackers can craft a malicious...
aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...
aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...
Important: Red Hat Security Advisory: Satellite 6.17.10 Async Update
A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CLSA-2026-1784683082 TuxCare security update for cookie-signature (1 CVE)
TuxCare rebuilt cookie-signature to address 1 CVE. Fixed in 1.0.1-tuxcare.1...
CLSA-2026-1784596295 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.2.2-tuxcare.2...
CLSA-2026-1784596273 TuxCare security update for tough-cookie (2 CVEs)
TuxCare rebuilt tough-cookie to address 2 CVEs. Fixed in 2.2.2-tuxcare.1...
CLSA-2026-1782089812 TuxCare security update for js-cookie (1 CVE)
TuxCare rebuilt js-cookie to address 1 CVE. Fixed in 2.2.1-tuxcare.1...
CLSA-2026-1780447838 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.6.0-tuxcare.1...
CLSA-2026-1780447837 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.4.0-tuxcare.1...
CLSA-2026-1777336757 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.7.2-tuxcare.1...
CLSA-2026-1776818217 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.4-tuxcare.1...
CLSA-2026-1774225211 TuxCare security update for tough-cookie (3 CVEs)
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 1.2.0-tuxcare.1...
CLSA-2026-1774052366 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.4.2-tuxcare.1...
CLSA-2026-1773879459 TuxCare security update for cookie-signature (1 CVE)
TuxCare rebuilt cookie-signature to address 1 CVE. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773879466 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.3.1-tuxcare.1...