32 matches found
Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os
🚨 CVE-2026-0257 – PAN-OS GlobalProtect Authentication Bypass...
EUVD-2020-29301
Malware in sbrugna...
EUVD-2012-0750
Malware in sbrugna...
EUVD-2006-4072
Malware in sbrugna...
EUVD-2010-1273
Malware in sbrugna...
EUVD-2013-5871
Malware in sbrugna...
EUVD-2004-0461
Malware in sbrugna...
EUVD-2011-3841
Malware in sbrugna...
EUVD-2015-5184
Malware in sbrugna...
EUVD-2004-0864
Malware in sbrugna...
EUVD-2013-3570
Malware in sbrugna...
EUVD-2022-5029
Malicious code in bioql PyPI...
EUVD-2024-37882
Malicious code in bioql PyPI...
EUVD-2022-35844
Malicious code in bioql PyPI...
CVE-2025-8037
CVE-2025-8037 affects Mozilla Firefox (and Thunderbird) browsers when a nameless cookie value contains an equals sign, shadowing other cookies. Affected: Firefox <141, Firefox ESR <140.1, Thunderbird <141, Thunderbird
CVE-2022-24045
A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The application, after a successful login, sets the session cookie on the browser...
CVE-2024-5962
A reflected cross-site scripting XSS vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the authentication flow, potentially leadi...
CVE-2020-11729
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
CVE-2024-10718
In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0...
Linux Distros Unpatched Vulnerability : CVE-2022-24737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the...