Race Condition

Overview rack-session is a session implementation for Rack. Affected versions of this package are vulnerable to Race Condition in Rack::Session::Pool middleware, which allows an attacker to restore and use a deleted session. The attacker must be in possession of a valid session cookie and the...

SurveyKing 安全漏洞

SurveyKing is a powerful survey system and exam system for javahuang individual developers. A security vulnerability exists in SurveyKing v1.3.1, which stems from a vulnerability that allows an attacker to elevate privileges by reusing a user session ID that has been deleted by the administrator...

xzs-mysql 安全漏洞

xzs-mysql is an open source front-end and back-end separation of the examination system by Mindskip Technology mindskip. A security vulnerability exists in xzs-mysql version 3.8, which stems from the presence of a session expiration insufficiency issue that allows an attacker to take advantage of...