DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.1 use a weak encryption algorithm to protect input parameters. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code execution. id: CVE-2018-15811 info: name: DotNetNuke...

TBK DVR4104/DVR4216 Devices - Authentication Bypass

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nscbarcontenthref' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. id: CVE-2022-35416 info: name: H3C SSL VPN =2022-07-10 - Cross-Site Scripting author: 0x240x23elu severity: medium description: | H3C SSL VPN 2022-07-10 and prior contains...

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

JS Help Desk <= 2.8.2 - SQL Injection

JS Help Desk WordPress plugin 2.8.2 contains a SQL injection caused by insufficient escaping and preparation of user-supplied values in 'js-support-ticket-token-tkstatus' cookie, letting unauthenticated attackers extract sensitive database information, exploit requires no authentication. id:...

SafeGuard for Privileged Passwords < 7.5.2 - Authentication Bypass

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations VMware or HyperV. The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2. id: CVE-2024-45488 info: name: SafeGuard for...

Jenkins <=2.196 - Cookie Exposure

Jenkins through 2.196, LTS 2.176.3 and earlier prints the value of the cookie on the /whoAmI/ URL despite it being marked HttpOnly, thus making it possible to steal cookie-based authentication credentials if the URL is exposed or accessed via another cross-site scripting issue. id: CVE-2019-10405...

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-43325 info: name: MooSocial 3.1.8 - Cross-Sit...

YesWiki < 4.5.4 - Cross-Site Scripting

YesWiki 4.5.4 contains a reflected cross-site scripting caused by unsanitized idformulaire parameter in /?BazaR endpoint, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link. id: CVE-2025-46550 info: name: YesWiki 4.5.4 - Cross-Site Scripting author:...

CVE-2026-21994

CVE-2026-21994 Resumen Oracle OKIT oci-designer-toolkit versión 0.3.0 contiene dos configuraciones incorrectas críticas que se encadenan en una toma de control total sin autenticación. Una SECRETKEY de Flask codificada de forma fija y expuesta en el repositorio público permite a cualquier atacant...

CVE-2024-3400-poc

PoC de la vulnerabilidad CVE-2024-3400 herramienta de verificación Descripción de la vulnerabilidad CVE-2024-3400 es una vulnerabilidad de inyección de comandos presente en los sistemas de firewall de Palo Alto. Un atacante, mediante una solicitud HTTP cuidadosamente elaborada, puede ejecutar...

CVE-2026-23723-POC

PoC CVE-2026-23723 - Ayudante de Explotación de Inyección SQL Autenticada en WeGIA Inyección SQL Basada en Errores Autenticada en WeGIA ≤ 3.6.1 GHSA-xfmp-2hf9-gfjp | Aviso Oficial Autor Original del PoC / Reportante : ViniCastro2001 GHSA Publicado por : nilsonLazarin mantenedor del proyecto Este...

EUVD-2026-81292

Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose Yii's cookieValidationKey is derived from...

cve-2020-10977-read-and-execute

CVE-2020-10977 leer y ejecutar Acerca de CVE-2020-10977 Informe de HackerOne: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 Cómo reproducir la parte de ejecución manualmente: De la lectura a la ejecución Acerca de este repositorio getsecret.py - script...

CVE-2026-39324

PoC de Explotación de CVE-2026-39324 El fallo de descifrado de Rack::Session::Cookie recurre a aceptar cookies sin cifrar | ---|--- Aviso| GHSA-33qg-7wpp-89cq Paquete| rack-session RubyGems Afectado| = 2.1.1 Corregido| 2.1.2 Resumen Rack::Session::Cookie con secrets: solo debería aceptar cookies...

CVE-2026-92592

Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose Yii's cookieValidationKey is derived from...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

调查 PAN-OS CVE-2024-3400 命令注入攻击尝试 概述 本项目记录了对针对 PAN-OS GlobalProtect 服务的 CVE-2024-3400 命令注入攻击尝试 的调查过程。 目标在于确定： 这是否是一次真实的攻击 是否发生了命令执行 是否存在受入侵的证据 警报概述 触发了一条关键警报，表明可能存在利用尝试。 目标: 172.16.17.139 PA-Firewall-01 来源: 144.172.79.92 端点: /global-protect/login.esp 方法: POST 操作: 允许 恶意载荷 请求包含一个精心构造的 cookie：...

CVE-2026-92592

Craft CMS 4.8.0–4.18.5 and 5.0.0–5.10.12 are affected by a remote code execution vulnerability (CVSS 3.1 score 8.8 High ). The root cause is that the HMAC signature for the license-shun cookie is not bound to its purpose—Yii's cookieValidationKey derives from the same Craft securityKey used for s...

CVE-2026-92592 Craft CMS before 4.18.6 Remote Code Execution via signed cookie

Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose Yii's cookieValidationKey is derived from...