cookiescanner

cookiescanner 用于检查多个站点中 cookie 标记的工具。 简介 该工具旨在简化当我们分析多个 Web 服务器时检查 cookie 标记的过程。 想知道为什么这个工具可能有用吗？ https://www.owasp.org/index.php/SecureFlag https://www.owasp.org/index.php/HttpOnly https://www.owasp.org/index.php/Testingforcookiesattributes%28OTG-SESS-002%29 用法 root@kitploit: 用法: cookiescanner.p...

CVE-2023-31852

CVE-2023-31852 Esiste un attacco di cross-site scripting XSS riflesso nell'interfaccia di gestione basata sul web di Cudy LT400. La pagina /cgi-bin/luci/admin/network/wireless/config presenta XSS riflesso tramite il parametro iface. I metodi di sfruttamento comporterebbero l'invio di una richiest...

CVE-2022-35497

In Trimble's TM4WEB =22.2.0, a causa di una errata configurazione di sicurezza degli identificatori di sessione, è possibile recuperare cookie di sessione validi tramite cross-site scripting riflesso che interessa l'endpoint del visualizzatore di documenti esterni. Nello specifico, i tre cookie...

CVE-2022-3949

CVE-2022-3949 XSS in Simple Cashiering System Simple Cashiering System è vulnerabile a Cross Site Scripting XSS - un attore malintenzionato può modificare il nome completo di un utente compromesso in un payload XSS e ogni volta che un amministratore visita la scheda utente o la scheda vendite e...

CVE-2022-3942

CVE-2022-3942 Cross Site Scripting in Sanitization Management System Descrizione: Una vulnerabilità di cross-site scripting XSS in Sanitization Management System v1.0 consente a potenziali attaccanti di eseguire script web o HTML arbitrari tramite un payload appositamente predisposto iniettato ne...

CVE-2023-31851

CVE-2023-31851 Existe um ataque de cross-site scripting XSS refletido na interface de gerenciamento baseada na web do Cudy LT400. A página /cgi-bin/luci/admin/network/wireless/status possui XSS refletido através do parâmetro iface. Os métodos de exploração envolvem o envio de uma requisição...

CVE-2023-45857-Demo

Demo zur Überprüfung der axios-Schwachstelle CVE-2023-45857 1. Im dev container starten 2. Im app-Container npm run dev ausführen 3. http://app.localhost aufrufen 4. In den Browser-Entwicklertools prüfen, dass der Cookie XSRF-TOKEN gesetzt ist Der Wert ist CREDENTIALTOKEN HttpOnly ist false...

CVE-2023-31853

CVE-2023-31853 Im webbasierten Management-Interface des Cudy LT400 existiert eine reflektierte Cross-Site-Scripting XSS-Angriffsmöglichkeit. Die Seite /cgi-bin/luci/admin/network/bandwidth weist eine reflektierte XSS über den Parameter icon auf. Die Ausnutzungsmethoden beinhalten das Senden einer...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Beschreibung: Eine Cross-Site-Scripting XSS-Sicherheitslücke im Sanitization Management System v1.0 ermöglicht es potenziellen Angreifern, beliebige Dateien über einen manipulierten Namen in die Systemlogo-Felder der Systeminfo-Felder hochzuladen. D...

OpenAM Insecure SSO Cookie Initialization

Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...

PT-2026-76574

Name of the Vulnerable Software and Affected Versions Etherpad versions 2.6.0 through 3.0.0 Description An issue exists in the device-to-device author-token transfer mechanism. The system uses the POST /tokenTransfer endpoint to store an author token and exposes it via the GET /tokenTransfer/uuid...

K000162890: Netty vulnerability CVE-2015-2156

Security Advisory Description Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improp...

Cookie Attribute Injection

undici is vulnerable to cookie attribute injection. The vulnerability is due to insufficient sanitization of cookie domain and unparsed values in setCookie, allowing attacker-controlled input to inject or override cookie attributes such as SameSite, Secure, and HttpOnly, potentially weakening...

EUVD-2026-50416

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields...

GHSA-V3R7-H72X-CJCM undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

Impact The setCookie function has two attribute injection paths. validateCookieDomain does not reject semicolons validateCookiePath already does at 0x3B, so a domain value like example.com; SameSite=None lands verbatim as Domain=example.com; SameSite=None. The unparsed array's loop only checks ea...

CVE-2026-16729

undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entries in the unparsed array are not sanitized, so attacker-influenced input can...

CVE-2026-16729 undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entries in the unparsed array are not sanitized, so attacker-influenced input can...

CVE-2026-16729 undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entries in the unparsed array are not sanitized, so attacker-influenced input can...

PT-2026-65852

Name of the Vulnerable Software and Affected Versions undici versions prior to 6.28.0 undici versions 7.0.0 through 7.28.9 undici versions 8.0.0 through 8.8.9 Description The setCookie function fails to fully sanitize cookie attributes. Specifically, the domain value is not checked for semicolons...

GHSA-JXJ7-G6GM-49J7 tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies

Summary tarteaucitron provides a list of cookies and buttons to delete them. If an attacker can write HTML with data attributes, they could create an element that silently deletes a cookie when clicked and trick a user to delete this cookie. Details tarteaucitron.cookie.purge is called on any...