PT-2024-12225 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 affected versions not specified Description: An issue in Linksys E5600 routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information about a...

PT-2024-12227 · Tp Link · Tp-Link Tl-War1200L +5

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-R473GP-AC TP-LINK XDR6020 TP-LINK TL-R479GP-AC TP-LINK TL-R4239G TP-LINK TL-WAR1200L TP-LINK TL-R476G Description: An issue in the listed TP-LINK routers allows attackers to hijack TCP sessions, potentially leading to a denial of...

Comfast CF-616AC 安全漏洞

Comfast CF-616AC is a WiFi router from China Four Seas Zonglian Network Technology Comfast. A security vulnerability exists in the Comfast CF-616AC that originates from allowing an attacker to hijack a TCP session, which could lead to a denial of service attack...

PT-2024-12228 · Ruijie · Ruijie Eg105G +3

Name of the Vulnerable Software and Affected Versions: Ruijie EG210G-P affected versions not specified Ruijie EG105G-V2 affected versions not specified Ruijie NBR affected versions not specified Ruijie EG105G affected versions not specified Description: An issue in the mentioned Ruijie routers...

多款TP-LINK产品 安全漏洞

The TP-LINK TL-R473GP-AC is an all-in-one Gigabit VPN router from China P&L TP-LINK. A security vulnerability exists in multiple TP-LINK products, which stems from a vulnerability that allows an attacker to hijack TCP sessions, potentially resulting in a denial-of-service attack. The following...

PT-2024-4005 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 affected versions not specified Description: The issue allows attackers to hijack TCP sessions, potentially leading to a denial of service. It is related to incorrect clearance or release of resources, which can be exploited...

PT-2024-12229 · Comfast · Comfast Cf-616Ac

Name of the Vulnerable Software and Affected Versions: Comfast CF-616AC affected versions not specified Description: An issue in Comfast CF-616AC routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information...

Apiris Kafeo 安全漏洞

Apiris Kafeo is a software solution from the French company Apiris. A security vulnerability exists in Apiris Kafeo version 6.4.4 that stems from a DLL hijacking issue...

PT-2024-12226 · Mercury · Mercury X30G +1

Name of the Vulnerable Software and Affected Versions: Mercury x30g affected versions not specified Mercury YR1800XG affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, which could lead to a denial of service. Recommendations: For Mercury...

CVE-2023-30312

An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...

CVE-2023-50977

A flaw was found In gnome-shell. The GNOME Network Manager and GNOME Shell Portal Helper connectivity checks send DNS checks that, if intercepted, may be used to launch a GNOME Captive Portal in a WebKitGTK browser and load arbitrary HTML and Javascript code. Mitigation Mitigation for this issue ...

GHSA-4QX8-J9VH-2628 silverstripe/framework's User-Agent header not correctly invalidating user session

A security protection device in Session designed to protect session hijacking was not correctly functioning. This function intended to protect user sessions by detecting changes in the User-Agent header, but modifications to this header were not correctly invalidating the user session...

PT-2024-40078 · Session · Session

Name of the Vulnerable Software and Affected Versions: Session affected versions not specified Description: A security protection mechanism in Session, designed to prevent session hijacking, was not functioning correctly. This mechanism aimed to protect user sessions by detecting changes in the...

JA4+ - Suite Of Network Fingerprinting Standards

JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware detection, session...

DLink DIR < 2.17.b02 (SAP10018)

The version of DLink DIR installed on the remote host is prior to 2.17.b02. It is, therefore, affected by a vulnerability as referenced in the SAP10018 advisory. - Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

Exploit for CVE-2024-11318

CVE-2024-11318 IDOR - AbsysNet 2.3.1 User Hijacking --- DI...

Session Hijacking

friendsofsymfony/user-bundle is vulnerable to session hijacking. The vulnerability is due to inadequate session management, which could allow an attacker to take over a users session...

CVE-2024-36076

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session...

CVE-2024-36076

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session...