CVE-2025-14440

CVE-2025-14440 JAY Login & Register = 2.4.01 - Authentifizierungsumgehung über Cookie 🚨 JAY Login & Register = 2.4.01 - Authentifizierungsumgehung über Cookie 📝 Beschreibung Das JAY Login & Register-Plugin für WordPress ist in Versionen bis einschließlich 2.4.01 anfällig für eine...

CVE-2017-14322

CVE-2017-14322 Exploit per Interspire Email Marketer emailmarketer Google Dork root@kitploit: intitle:"Control Panel" + emailmarketer Exploit utilizzando Burp Suit Aggiungi una regola Match and Replace per l'header della Request come di seguito: root@kitploit: Match: ^Cookie.$ Replace: Cookie:...

CVE-2024-52475

CVE-2024-52475 WordPress Wawp Plugin = 3.0.17 ist anfällig für gebrochene Authentifizierung Kontoübernahme Haftungsausschluss! Die in diesem Dokument zu CVE-2024-52475 bereitgestellten Informationen dienen ausschließlich zu Lern- und Bildungszwecken. Wir ermutigen oder autorisieren nicht die...

grafana-CVE-2018-15727

Grafana CVE-2018-15727 Exploit Installation root@kitploit: $ go get github.com/u238/grafana-CVE-2018-15727 Verwendung root@kitploit: $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for...

CVE-2024-3400-poc

PoC CVE-2024-3400 strumento di verifica Descrizione della vulnerabilità CVE-2024-3400 è una vulnerabilità di injection di comandi presente nel sistema firewall Palo Alto. Un attaccante, tramite una richiesta HTTP appositamente costruita, può eseguire comandi malevoli sul server di destinazione e...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. замените zbxsignedsession на cookie 2. войдите с помощью единого входа SAML автор: @random-robbie、@jweny и @Mr-xn ссылка: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

CVE-2024-3400-POC

CVE-2024-3400 Script di Test RCE Panoramica Questo script Python è progettato per testare una vulnerabilità di esecuzione remota di codice RCE, specificamente CVE-2024-3400, che colpisce alcuni portali GlobalProtect di Palo Alto Networks. La vulnerabilità consente l'esecuzione non autorizzata di...

CVE-2026-77995

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

EUVD-2026-64844

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

CVE-2026-77995

CVE-2026-77995 is an arbitrary account takeover vulnerability in the miniOrange OAuth Client Joomla extension, affecting versions prior to 3.2.0 . The flaw is caused by the manipulation of a cookie value , allowing an unauthenticated attacker to log in as any account on the site, including admini...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

PT-2026-80858

Name of the Vulnerable Software and Affected Versions miniOrange OAuth Client versions prior to 3.2.0 Description An issue in the miniOrange OAuth Client extension for Joomla allows an attacker to log in as any account, including administrators, without requiring a valid account or prior...

UBUNTU-CVE-2026-48551

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matching cookie and request parameter values to bypass CSRF protection, enabling unauthenticated attackers to run command...

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

HTTP Response Splitting

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to HTTP Response Splitting via the X-Forwarded-Prefix HTTP header. An attacker can manipulate cookie attributes by injecting arbitrary values into the Set-Cookie path attribute,...

CVE-2025-67446

Improper Authentication Authentication Bypass exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value e.g., setting it to "admin", an attacker can bypass the authentication schema and gain...

CVE-2026-31387 Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation

Improper Authentication vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-31387 Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation

Improper Authentication vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...