Lucene search
+L

10219 matches found

CVE
CVE
•added 2022/09/13 8:35 p.m.•87 views

CVE-2022-40621

The CVE-2022-40621 entry concerns WAVLINK Quantum D4G (WN531G3). Affected firmware versions M31G3.V5030.200325 and earlier communicate over HTTP (not HTTPS), and the device’s authentication hashing does not rely on a server-supplied key. This enables an attacker with sufficient network access to ...

7.5CVSS7.5AI score0.00835EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2022/09/13 10:15 a.m.•13 views

CVE-2022-3174

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

7.5CVSS7.1AI score0.00706EPSS
SaveExploits1References3
NVD
NVD
•added 2022/09/13 10:15 a.m.•58 views

CVE-2022-3174

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

7.5CVSS0.00706EPSS
SaveExploits1References2
osv_pysec
osv_pysec
•added 2022/09/13 10:15 a.m.•67 views

PYSEC-2022-271

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

7.5CVSS0.6AI score0.00706EPSS
SaveExploits1References3
Prion
Prion
•added 2022/09/13 10:15 a.m.•21 views

Session fixation

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

5CVSS7.5AI score0.00706EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2022/09/13 9:20 a.m.•33 views

CVE-2022-3174 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

7.5CVSS7.6AI score
SaveExploits0References4
Mend
Mend
•added 2022/09/13 9:20 a.m.•8 views

CVE-2022-3174

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

8.7CVSS0.00706EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/09/13 9:20 a.m.•66 views

CVE-2022-3174 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

7.5CVSS7.7AI score0.00706EPSS
SaveExploits1References2
CVE
CVE
•added 2022/09/13 9:20 a.m.•94 views

CVE-2022-3174

CVE-2022-3174 affects rdiffweb prior to 2.4.2, where cookies are transmitted over HTTPS without the Secure attribute, exposing confidentiality. The issue impacts the GitHub repo ikus060/rdiffweb; CVSS v3.1/3.0 base score 7.5 (HIGH) with network attacker, no user interaction. Affected component: s...

7.5CVSS7.3AI score0.00706EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/13 12:00 a.m.•11 views

CVE-2022-3174: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

7.5CVSS7.3AI score0.00706EPSS
SaveExploits1References3
Fedora
Fedora
•added 2022/09/12 5:48 p.m.•22 views

[SECURITY] Fedora 37 Update: curl-7.84.0-3.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/09 2:50 a.m.•44 views

Security Bulletin: Multiple vulnerabilities in WebSphere Liberty affect SPSS Collaboration and Deployment Services

Summary There are multiple vulnerabilities in WebSphere Liberty used by SPSS Collaboration and Deployment Services. These issues have been addressed. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are...

7AI score0.00742EPSS
SaveExploits0Affected Software1
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•36 views

Windows shellcode stage, Windows x64 Reverse HTTPS Stager (winhttp)

Custom shellcode stage. Tunnel communication over HTTPS Windows x64 winhttp Module Options msf use payload/windows/x64/custom/reversewinhttps msf payloadreversewinhttps show actions ...actions... msf payloadreversewinhttps set ACTION msf payloadreversewinhttps show options ...show and set...

5.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•50 views

Windows shellcode stage, Reverse HTTPS Stager with Support for Custom Proxy

Custom shellcode stage. Tunnel communication over HTTP using SSL with custom proxy support Module Options msf use payload/windows/custom/reversehttpsproxy msf payloadreversehttpsproxy show actions ...actions... msf payloadreversehttpsproxy set ACTION msf payloadreversehttpsproxy show options...

7.1AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•60 views

Windows shellcode stage, Reverse Hop HTTP/HTTPS Stager

Custom shellcode stage. Tunnel communication over an HTTP or HTTPS hop point. Note that you must first upload data/hop/hop.php to the PHP server you wish to use as a hop. Module Options msf use payload/windows/custom/reversehophttp msf payloadreversehophttp show actions ...actions... msf...

7.1AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•29 views

Windows shellcode stage, Windows Reverse HTTPS Stager (wininet)

Custom shellcode stage. Tunnel communication over HTTPS Windows wininet Module Options msf use payload/windows/custom/reversehttps msf payloadreversehttps show actions ...actions... msf payloadreversehttps set ACTION msf payloadreversehttps show options ...show and set options... msf...

5.8AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•31 views

Windows shellcode stage, Windows Reverse HTTPS Stager (winhttp)

Custom shellcode stage. Tunnel communication over HTTPS Windows winhttp Module Options msf use payload/windows/custom/reversewinhttps msf payloadreversewinhttps show actions ...actions... msf payloadreversewinhttps set ACTION msf payloadreversewinhttps show options ...show and set options... msf...

5.8AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•153 views

Powershell Exec, Windows shellcode stage, Reverse Hop HTTP/HTTPS Stager

Execute an x86 payload from a command via PowerShell. Custom shellcode stage. Tunnel communication over an HTTP or HTTPS hop point. Note that you must first upload data/hop/hop.php to the PHP server you wish to use as a hop. Module Options msf use...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•154 views

Powershell Exec, Windows shellcode stage, Windows Reverse HTTPS Stager (wininet)

Execute an x86 payload from a command via PowerShell. Custom shellcode stage. Tunnel communication over HTTPS Windows wininet Module Options msf use payload/cmd/windows/powershell/custom/reversehttps msf payloadreversehttps show actions ...actions... msf payloadreversehttps set ACTION msf...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2022/09/08 7:49 p.m.•128 views

Powershell Exec, Windows shellcode stage, Reverse HTTPS Stager with Support for Custom Proxy

Execute an x86 payload from a command via PowerShell. Custom shellcode stage. Tunnel communication over HTTP using SSL with custom proxy support Module Options msf use payload/cmd/windows/powershell/custom/reversehttpsproxy msf payloadreversehttpsproxy show actions ...actions... msf...

7.2AI score
SaveExploits0
Rows per page
Query Builder