4057 matches found
PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability
Document Title: =============== PayPal Inc Bug Bounty 117 - Session Fixation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1509 EIBBP-31983 P2 Video: http://www.vulnerability-lab.com/getcontent.php?id=1615 Vulnerability Magazine:...
PayPal Inc - Bypass & Session Fixation Vulnerability
Document Title: =============== PayPal Inc - Bypass & Session Fixation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1615 Video: https://www.youtube.com/watch?v=Uyg8xlt-8go Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1509 Release Date:...
PayPal Inc - Bypass & Session Fixation Vulnerability
Document Title: =============== PayPal Inc - Bypass & Session Fixation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1615 Video: https://www.youtube.com/watch?v=Uyg8xlt-8go Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1509 Release Date:...
PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability
Document Title: =============== PayPal Inc Bug Bounty 117 - Session Fixation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1509 EIBBP-31983 P2 Video: http://www.vulnerability-lab.com/getcontent.php?id=1615 Vulnerability Magazine:...
Oracle: Security Advisory (ELSA-2013-0964)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2029
Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier...
Session fixation
IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
Session fixation
Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier...
CVE-2015-2029
IBM WebSphere eXtreme Scale 7.1.0 (before 7.1.0.3) and 7.1.1 (before 7.1.1.1) expose a session fixation vulnerability that allows remote attackers to hijack a user’s web session by exploiting an existing session identifier. The issue stems from improper session management (failure to invalidate o...
CVE-2015-2029
Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier...
Gentoo Security Advisory GLSA 201502-06
Gentoo Linux Local Security Checks GLSA 201502-06 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Amazon Linux: Security Advisory (ALAS-2013-224)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Session fixation
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service session store consumption or session record removal via a large number of requests to...
Session fixation
Foreman before 1.8.1 does not set the secure flag for the sessionid cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
JON: Cross Site scripting possible on the JBoss ON 404 error page
It was discovered that a cross-site scripting XSS vulnerability on a JBoss Operations Network 404 error page allowed for session fixation attacks. An attacker could use this flaw to impersonate a legitimate user, resulting in compromised integrity of secure data...
TYPO3 CMS Session Fixation Vulnerability
TYPO3 is a free and open source content management system. A security vulnerability exists in TYPO3 CMS that allows remote attackers to exploit the vulnerability to submit special requests, hijack sessions, and gain unauthorized access to the application...
Pivotx Session Fixation Vulnerability
Pivotx is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A session fixation vulnerability exists in the fileupload.php file in Pivotx versions prior to 2.3.11. A remote attacker can exploit this...
Session fixation
Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter...
CVE-2015-5458
PivotX (fileupload.php) is affected by CVE-2015-5458: a session fixation vulnerability in PivotX before 2.3.11 allows remote attackers to hijack sessions via the sess parameter. Affected software: PivotX prior to 2.3.11; remediation is to upgrade to PivotX 2.3.11 or later (per CVE references).