CVE-2024-34568

Exploit Title: LetterPress = 1.2.1 - Cookie Stealing Vulnerability Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2022-45059-demo

CVE-2022-45059-demo Las versiones 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 y 7.2.0 de Varnish Cache tienen una vulnerabilidad de contrabando de solicitudes donde un atacante puede solicitar que el encabezado content-length se convierta en hop-by-hop. Esta es una demostración que consiste en una...

CVE-2024-55211

CVE-2024-55211 Cookie-based authentication vulnerability on Tk-Rt-Wr135G Affected vendor : Think Technology Affected product : Wireless Router Ac 1199Mbps Tk-Rt-Wr135G Affected version : Firmware V3.0.2-X000 Description The vulnerability allows the bypass of the login form in the router...

CVE-2024-40507

CVE-2024-40507 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMPersonnel.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMPersonnel.asmx function. Vulnerable Product...

CVE-2020-12629

Title: osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Date : 2020-03-24 Source Link: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE: https://vulners.com/cve/CVE-2020-12629 Exploit-Db :...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — PrivateBin Local File Inclusion via Template Cookie Path Traversal Severity: Medium CVSS v3.1: 5.8 Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected versions: PrivateBin = 1.7.7 Patched version: 2.0.3 CWE: CWE-23 Relative Path Traversal, CWE-73 External Control of File Name or...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 Una implementación de una prueba de concepto para CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 Lo siguiente es una actualización de CVE-2018-5767, una vulnerabilidad que explota una llamada no protegida a sscanf que ocurre al analizar el encabezado 'Cookie' para una...

mod_auth_openidc security update

2.4.16.11-1.1 - Fix CVE-2026-54789: out-of-bounds read/write in state cookie parsing - Resolves: RHEL-248045...

PT-2026-106211

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description Logout functionality clears the browser's auth-token cookie but fails to revoke the corresponding server-side session. This allows a previously captured session token to remain valid and be used to...

Oracle Linux 10 : mod_auth_openidc (ELSA-2026-75581)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-75581 advisory. - Fix CVE-2026-54789: out-of-bounds read/write in state cookie parsing Tenable has extracted the preceding description block directly from the Oracle Linux...

RHEL 10 : mod_auth_openidc (RHSA-2026:75581)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:75581 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID...

CVE-2026-52774-YESWIKI-XSS

CVE-2026-52774-YESWIKI-XSS CVE-2026-52774 is a reflected XSS vulnerability in YesWiki's Bazar widget handler. The query parameter in the NoSuchPage/widget endpoint is inadequately sanitized using striptags, which does not escape double quotes. This allows an attacker to break out of HTML attribut...

CVE-2016-4437

shiro-1.2.4 Vulnerability Tool Decrypt rememberMe value and export corresponding class file Usage xk-mt-rememberMe解码.py Instructions: After running, first enter the key or press Enter to use the default key 'kPH+bIxk5D2deZiIxcaaaA==', then enter the rememberMe value from the request packet. After...

cve-2021-26855

cve-2021-26855 GET /ecp/x.png HTTP/1.1 Host: 192.168.170.134 Cookie: X-BEResource=localhost1942062522 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:109.0 Gecko/20100101 Firefox/110.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8...

CVE-2022-0155-PoC

CVE-2022-0155 Proof-of-Concept PoC This repository contains a demonstration of the CVE-2022-0155 vulnerability. The vulnerability was detected by ranjit-git and is described in detail here. The purpose of this PoC is to demonstrate that the vulnerability doesn't just apply to scenarios where...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere deserialización de datos no confiables - IBM WebSphere 7,8,8.5,9 Enlace a la fuente original del informe: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Título: IBM WebSphere deserialización de datos no confiabl...

SealSecurityAssignment

SealSecurityAssignment Researching on the vulnrability CVE-2023-26136 Research on Vulnerability: CVE-2023-26136 Description: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=fal...

Research-CVE-2023-27524

Research-CVE-2023-27524 The ASEAN Information Security Student Competition Jeopardy has temporarily concluded; my team MSECHUNT3R won second place in the Jeopardy bracket. I feel both happy and sad because this year's web challenge didn't meet my expectations, but anyway, I have a CVE to analyze ...

CVE-2023-25292

CVE-2023-25292 Cross-Site Scripting XSS Reflejado en Intermesh BV Group-Office versión 6.6.145, permite a los atacantes obtener privilegios elevados y acceder a información sensible a través de la cookie GOLANGUAGE Detalles de la vulnerabilidad Producto: Aplicación Group Office Versión: 6.6.145...