TOTOLINK A830R 授权问题漏洞

The TOTOLINK A830R is a dual-band wireless router that supports both 2.4GHz and 5GHz bands with a maximum wireless transfer rate of 1200Mbps, making it suitable for home network coverage needs. An authentication bypass vulnerability exists in the TOTOLINK A830R. The vulnerability stems from its...

CVE-2022-48066

An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie...

Intelbras SG 2404 MR 安全漏洞

The Intelbras SG 2404 MR is a switch with network management features from Intelbras, Brazil. A security vulnerability exists in Intelbras SG 2404 MR version 20180928-rel64938. An authenticated attacker can exploit the vulnerability to create an administrator account via a specially crafted user...

CVE-2022-31273

An issue in TopIDP3000 Topsec Operating System tos3.3.005.665b.15smpidp allows attackers to perform a brute-force attack via a crafted sessionid cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

Design/Logic Flaw

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

Linglong v1.0 has an access-control bypass where a crafted cookie grants access to the application's background. Veracode attributes the root cause to a hard-coded JWT in jwt.go, enabling cookie forging. Exploitation is feasible over the network via crafted cookies, granting unauthorized access t...

Linglong 安全漏洞

Linglong is an A-asset cruise scanning system by drunkkk's personal developer. It is used to discover assets, perform port blasting, and help organizations find weak password problems faster. Linglong v1.0 version has a security vulnerability that stems from an access control issue. An attacker...

Silverstripe CMS Arbitrary Code Execution

code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized...

phpMyAdmin CSS Injection Vulnerability

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

The vulnerability of the session restoration function of the Shibboleth Service Provider’s authentication component, related to the manipulation of the zero pointer, allows a perpetrator to trigger a service failure.

The vulnerability of the session restoration function of the Shibboleth Service Provider component is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using a specially created cookie file...

Ice Hrm 授权问题漏洞

Ice Hrm is a human resource management system. Ice Hrm suffers from a session fixation vulnerability. An attacker can exploit the vulnerability to hijack a valid user session via a specially crafted session cookie...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

UBUNTU-CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...