CVE-2026-72887

A flaw was found in Net::OAuth::Client. A malicious service provider can silently downgrade an OAuth 1.0a connection to OAuth 1.0 by omitting the oauthcallbackconfirmed parameter in the request token response. This downgrade vulnerability removes the oauthverifier binding, making the application...

MDaemon-Advisories

MDaemon 安全公告 MDaemon 公告： CVE-2021-27180（反射型 XSS） CVE-2021-27181（CSRF Token 固定） CVE-2021-27182（Iframe 注入） CVE-2021-27183（远程代码执行） 这些漏洞已于 2021 年 1 月修复，并已作为 CVE 公开。它们可以组合利用，通过电子邮件消息实现远程代码执行/帐户接管（需要用户交互）。 时间线： 2020 年 12 月 15 日：向供应商提交漏洞报告 2021 年 1 月 12 日：发布补丁 补丁说明：...

CVE-2026-105233

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

EUVD-2026-92256

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

CVE-2026-105233

A session fixation vulnerability exists in the Login Flow component of the kishor-23 food-waste-management-system (specifically within the login.php file). The root cause involves the manipulation of the PHPSESSID argument, which allows for remote exploitation. While the exploit has been disclose...

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Vvveb CMS v1.0.6.1 中的会话固定漏洞 作者： Andrew Paul 发现日期： 2025年6月9日 厂商： Vvveb 厂商URL： http://vvveb.com 厂商GitHub： https://github.com/givanz/Vvveb 受影响版本： 1.0.6.1（可能包括更早版本） CVE ID： CVE-2025-8517 摘要 在Vvveb CMS 1.0.6.1版本的认证机制中发现了一个会话固定漏洞，分类为CWE-384:...

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - 通过重写阀的会话固定...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel 针对 CVE-2020-11819 和 CVE-2020-15946 的概念验证。已在 Rukovoditel 2.4.x、2.5.x 和 2.6.1 上测试。 描述： 此漏洞利用工具有两种执行模式：一种是利用会话固定漏洞（CVE-2020-15946），另一种是利用任意配置文件下任意账户的访问凭据。 使用 --type L 选项时，该脚本会创建一个恶意链接，如果受害者在浏览器中访问该链接，将设置一个任意的会话标识符，用于在其头像上传带有 PHP 内容的图片后窃取其会话，然后利用本地文件包含（CVE-2020-11819）获得一个反向...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-102489link is external Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490link is external Zammad GmbH Zammad Improper Privilege Management...

CVE-2026-104469 YesWiki before 4.6.7 Session Fixation via Login in AuthController.php

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki- session cookie can reuse it after login to access private...

EUVD-2026-91480

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki- session cookie can reuse it after login to access private...

CVE-2026-104469

YesWiki versions prior to 4.6.7 are susceptible to a session fixation vulnerability. The root cause is that the application fails to regenerate the PHP session ID during the login process. An attacker who obtains or sets a victim's pre-authentication YesWiki- * session cookie can reuse that cooki...

Zammad GmbH Zammad Session Fixation Vulnerability

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490...

aegis-latent-core

Aegis Latent Core Puerta de enlace de gobernanza de IA y evidencia criptográfica Aegis Latent Core registra evidencia firmada y vinculada por hash de cada llamada de IA gobernada — antes de que la respuesta llegue al solicitante — y emite una prueba portátil que un tercero verifica sin confiar en...

social-auth-core has a Session Fixation issue

ImpactThe partial-pipeline resume mechanism accepted partialtoken as a bearer credential without binding it to the browser session that created it.Applications using resumable partial pipeline steps could allow an attacker to start an authentication flow, obtain a valid partial token and...

CVE-2026-94220 Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth plugin

Cross-Site request forgery CSRF vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause that user's browser session on a protected route to be established under the attacker's identity instead of their own. Any work...

CVE-2026-94220

A Cross-Site request forgery (CSRF) vulnerability exists in the feishu-auth and dingtalk-auth plugins within Apache APISIX (versions 3.17.0 through 3.18.0 ). This flaw allows an attacker to trick a user into clicking a crafted link, causing the user's browser session on a protected route to be es...

CVE-2026-94220 Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth plugin

Cross-Site request forgery CSRF vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause that user's browser session on a protected route to be established under the attacker's identity instead of their own. Any work...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1780997466)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780997466 advisory. - Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7...

Rocky Linux 10.2 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_18537)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618537 advisory. tomcat: Apache Tomcat: Security constraint bypass for CGI scripts CVE-2025-46701 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session...