CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

EUVD-2021-14207

Malware in sbrugna...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

Authentication flaw

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27453: Authentication Bypass Using an Alternate Path or Channel

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

PT-2021-17460

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0 Description The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

MesaLabs AmegaView 命令注入漏洞

MesaLabs AmegaView is a continuous monitoring system CMS from MesaLabs USA. A command injection vulnerability exists in MesaLabs AmegaView version 3.0 and prior versions, which stems from passwords in the system that are generated by an easily reversible algorithm, and the use of default cookies...

Lan ATMService M3 ATM Code Issue Vulnerability

Lan ATMService M3 ATM Monitoring System is a software that can be used to monitor ATM machines from the Russian company Lan ATMService. A security vulnerability exists in Lan ATMService M3 ATM 6.1.0, which can be exploited by an attacker to gain control over system sessions that do not expire...