169 matches found
CVE-2016-6629
An issue was discovered in phpMyAdmin involving the $cfg'ArbitraryServerRegexp' configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x...
CVE-2015-7490
CVE-2015-7490 affects IBM InfoSphere Information Server: versions 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5. An attacker with a valid login could modify the user cookie to bypass access restrictions and access information intended for another user. IBM...
PT-2015-6327
Name of the Vulnerable Software and Affected Versions iOS versions prior to 9 Description The issue concerns the document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit, allowing remote attackers to bypass an intended single-cookie restriction. Recommendations For versions...
CVE-2015-3027
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program...
CVE-2014-3620
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain...
Bloginator 1a - SQL Command Injection via Cookie Bypass Exploit
No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...
bloginator 1a - (cookie bypass/sql) Multiple Vulnerabilities
No description provided by source. Author = FireShot , Jacopo Vuga. Mail = fireshotatautisticidotorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL...
PT-2016-7004
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x prior to 4.0.10.17 phpMyAdmin versions 4.4.x prior to 4.4.15.8 phpMyAdmin versions 4.6.x prior to 4.6.4 Description An issue was discovered in phpMyAdmin involving the $cfg'ArbitraryServerRegexp' configuration...
CVE-2011-3887: Reliance on Cookies without Validation and Integrity Checking
Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors...
CVE-2011-3257
The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie...
DEBIAN-CVE-2010-2092
SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rraid parameter in a GET request in conjunction with a valid rraid value in a POST request or a cookie, which causes the POST or cookie value to bypass the...
CVE-2009-2642: Improper Authentication
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...
Authentication flaw
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...
Bloginator v1a SQL Command Injection via Cookie Bypass Exploit
No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...
Bloginator v1a (Cookie Bypass/SQL) Multiple Remote Vulnerabilities
No description provided by source. Author = FireShot , Jacopo Vuga. Mail = fireshotatautisticidotorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL...
Bloginator 1a - SQL Injection Command Injection (via Cookie Bypass )
Bloginator 1a - SQL Injection Command Injection via Cookie Bypass Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotautisticiorg / osirysautisticiorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...
Bloginator v1a (Cookie Bypass/SQL) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== Bloginator v1a Cookie Bypass/SQL Multiple Remote Vulnerabilities ================================================================== Author = FireShot , Jacopo Vuga. Softwar...
Bloginator v1a SQL Command Injection via Cookie Bypass Exploit
Exploit for unknown platform in category web applications ============================================================== Bloginator v1a SQL Command Injection via Cookie Bypass Exploit ============================================================== Author = FireShot , Jacopo Vuga. Thx to = Osirys f...
Bloginator 1a - Cookie Bypass SQL Injection
Bloginator 1a - Cookie Bypass SQL Injection Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL...
Bloginator 1a - SQL Injection / Command Injection (via Cookie Bypass )
Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotautisticiorg / osirysautisticiorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to ...