EUVD-2022-33962

Malicious code in bioql PyPI...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

Design/Logic Flaw

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

CVE-2022-29633

Linglong v1.0 has an access-control bypass where a crafted cookie grants access to the application's background. Veracode attributes the root cause to a hard-coded JWT in jwt.go, enabling cookie forging. Exploitation is feasible over the network via crafted cookies, granting unauthorized access t...

CVE-2022-29633: Undefined Security Weakness

An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie...

Linglong security vulnerabilities

Linglong is an A-asset cruise scanning system by drunkkk's personal developer. It is used to discover assets, perform port blasting, and help organizations find weak password problems faster. Linglong v1.0 version has a security vulnerability that stems from an access control issue. An attacker...

PT-2022-19740 · Linglong · Linglong

Name of the Vulnerable Software and Affected Versions: Linglong version 1.0 Description: An access control issue allows attackers to access the background of the application via a crafted cookie. Recommendations: For Linglong version 1.0, consider restricting access to sensitive areas of the...