CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Riepilogo Il firmware Tenda AC15 V15.03.05.18multi rilascia un cookie di autenticazione nella forma password= e lo restituisce senza i flag HttpOnly, Secure o SameSite, esponendo l'hash della password al client. Il suffisso a bassa entropia funge da identificatore di...

EUVD-2025-1702

Malicious code in bioql PyPI...

CVE-2025-53757 Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP...

CVE-2025-53757 Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP...

CVE-2025-53757

The CVE-2025-53757 entry concerns the Digisol DG-GR6821AC Router. The root cause is misconfiguration of both Secure and HttpOnly session cookie flags on the router’s web interface, allowing a remote attacker to capture cookies over unencrypted HTTP. This could lead to disclosure of sensitive info...