135 matches found
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute due to the lack of the Secure attribute on session and OIDC state cookies in the authentication process. An attacker can recover session cookies and impersonate a user or enab...
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute due to the lack of the Secure attribute on session and OIDC state cookies in the authentication process. An attacker can recover session cookies and impersonate a user or enab...
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute due to the lack of the Secure attribute on session and OIDC state cookies in the authentication process. An attacker can recover session cookies and impersonate a user or enab...
GHSA-C6R4-QJMW-CVJ2 Apache Shiro sends sensitive cookies in HTTPS session without 'Secure' attribute
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview org.apache.shiro:shiro-web is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute in the form...
Sensitive Cookie in HTTPS Session Without "Secure" Attribute
Overview @grackle-ai/server is a Grackle server orchestrator — spawns and wires core gRPC, web-server HTTP, MCP, and PowerLine Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute in the session process. An attacker can intercept session...
CVE-2023-4654
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1...
EUVD-2009-1475
Malware in sbrugna...
EUVD-2010-5148
Malware in sbrugna...
EUVD-2015-8352
Malware in sbrugna...
EUVD-2014-0935
Malware in sbrugna...
EUVD-2014-3124
Malware in sbrugna...
EUVD-2016-5726
Malware in sbrugna...
EUVD-2008-7247
Malware in sbrugna...
EUVD-2020-29431
Malware in sbrugna...
EUVD-2014-6039
Malware in sbrugna...
EUVD-2017-5567
Malware in sbrugna...
EUVD-2020-21406
Malware in sbrugna...