Malicious code in cookie-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe3ae0666fc23cea770581c1bc3ca124e00a25f8c4a4794d120a971589ad6d3 The package cookie-mapper was found to contain malicious code...

MAL-2025-192728 Malicious code in cookie-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe3ae0666fc23cea770581c1bc3ca124e00a25f8c4a4794d120a971589ad6d3 The package cookie-mapper was found to contain malicious code...

EUVD-2025-204925

Malicious code in cookie-mapper npm...

EUVD-2025-204926

Malicious code in cookie-breaker npm...

MAL-2025-192727 Malicious code in cookie-breaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64a69ed1f4bd909ec9439986055d180490e4928aba8d08b45b4645956f63b14 The package cookie-breaker was found to contain malicious code...

Malicious code in cookie-breaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64a69ed1f4bd909ec9439986055d180490e4928aba8d08b45b4645956f63b14 The package cookie-breaker was found to contain malicious code...

EUVD-2023-60234

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access...

CVE-2023-53972

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access...

CVE-2023-53972

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access...

CVE-2023-53972

WebTareas 2.4 exposes an unauthenticated SQL injection via the webTareasSID cookie parameter. Multiple connected sources confirm the issue and describe exploitation through error-based and time-based blind techniques to extract data and access sensitive information. The PT-2025-52709 entry notes ...

CVE-2023-53972 WebTareas 2.4 Unauthenticated SQL Injection via Session Cookie Parameter

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access...

CVE-2023-53972 WebTareas 2.4 Unauthenticated SQL Injection via Session Cookie Parameter

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access...

LinkedIn: Session Cookie Leakage via Static Header Field in WebViewerFragment

A vulnerability was identified in the "WebViewerFragment" that could lead to the leakage of the user's cookies. The root cause was a static field "CUSTOMHEADERS" that persisted cookies across different URL loads, allowing an attacker to steal the victim's session cookies. The vulnerability was...

curl: Public-suffix cookie injection when libpsl is disabled

Summary: When libcurl is built without libpsl, Domain attribute validation accepts public suffixes like .co.uk, allowing a malicious host to plant cookies that are later sent to unrelated sibling domains using the same cookie jar. AI assistance was used to draft this report. Steps to Reproduce: 1...

CVE-2023-53957

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

webTareas SQL注入漏洞

webTareas is a web-based open source collaboration tool for luiswang individual developers. The product supports features such as project management, bug tracking, content management and meeting management. A SQL injection vulnerability exists in webTareas version 2.4, which stems from an SQL...

AlmaLinux 8 : curl (ALSA-2025:23383)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23383 advisory. curl: libcurl: Curl out of bounds read for cookie path CVE-2025-9086 Tenable has extracted the preceding description block directly from the AlmaLinux security...

PT-2025-52709

Name of the Vulnerable Software and Affected Versions WebTareas version 2.4 Description WebTareas 2.4 contains a SQL injection issue in the webTareasSID cookie parameter. This allows unauthenticated attackers to manipulate database queries. Attackers can use error-based and time-based blind SQL...

Kimai contains a SameSite cookie vulnerability

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

CVE-2023-53957

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...