PT-2026-146572

Name of the Vulnerable Software and Affected Versions Scapy versions prior to 2.7.0 Description An insecure deserialization issue exists in the load session function. An attacker can execute arbitrary Python code by tricking a user into loading a specially crafted .pkl.gz pickle session file via...

PYSEC-2018-80

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

PT-2018-9416

Name of the Vulnerable Software and Affected Versions aiohttp-session versions prior to 2.4.0 Description The issue concerns a Session Fixation vulnerability in the load session function for RedisStorage. This can result in Session Hijacking. The attack appears to be exploitable via any method th...