9 matches found
DAEnetIP4 METO v1.25 - Session Hijacking
DAEnetIP4 METO v1.25 contains improper session management in the /loginok.htm endpoint, letting attackers hijack sessions, exploit requires attacker to control or intercept session tokens. id: CVE-2025-28242 info: name: DAEnetIP4 METO v1.25 - Session Hijacking author: 0xAkoko severity: high...
EUVD-2025-11885
Malicious code in bioql PyPI...
CVE-2025-28242
Improper session management in the /loginok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack...
CVE-2025-28242
Improper session management in the /loginok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack...
PT-2025-17328
Name of the Vulnerable Software and Affected Versions DAEnetIP4 METO version 1.25 Description The issue is related to improper session management in the "/login ok.htm" endpoint, which allows attackers to execute a session hijacking attack. Recommendations For DAEnetIP4 METO version 1.25, conside...
CVE-2025-28242
The DAEnetIP4 METO v1.25 (an IP controller by Denkovi ) is vulnerable to a session hijacking attack due to improper session management in the /login_ok.htm endpoint. An attacker who can control or intercept session tokens can hijack user sessions to gain unauthorized access to accounts and sensit...
CVE-2025-28242
Improper session management in the /loginok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack...
