46 matches found
OptixGate
Optix Gate is a multi-purpose secure remote administration tool for Microsoft Windows. It provides remote access to multiple Windows sessions and/or machines simultaneously. History Optix Gate was created, among other things, to maintain and further develop my Windows application programming...
pocket_disasm
Pocket Disasm 一个 MCP 端点。多个隔离的 IDALib 会话。 一个轻量级的、以代理为先的控制层，用于使用 IDA Pro MCP 工具集进行无头二进制分析。 !IMPORTANT Pocket Disasm 是一个独立的开源项目。它与 Hex-Rays 无任何关联、未获其认可、未受其赞助，也非其官方产品。 IDA Pro 和 IDALib 是 Hex-Rays 的产品，需要用户单独拥有有效的安装和许可证。Pocket Disasm 不分发 IDA、IDALib 或任何 Hex-Rays 软件。 Pocket Disasm 运行一个公共的 MCP...
c2-cloud
关于项目 C2 Cloud 是一个强大的基于网页的 C2 框架，旨在简化渗透测试人员的工作。它允许像在 AWS 云中访问 EC2 实例一样轻松地访问被攻陷的后门。通过用户友好的界面，它可以管理多个同时进行的后门会话。 C2 Cloud 是开源的。安全分析师可以自信地进行模拟，获得宝贵的经验，并为其组织的主动防御态势做出贡献。 支持的反弹 Shell： 1. Reverse TCP 2. Reverse HTTP 3. Reverse HTTPS（配置在负载均衡器后面） 4. Telegram C2 演示 C2 Cloud 演练： https://youtu.be/hrHTRDcGj8 使...
Koi
koi 🎏 &color=rgb\255%2C%20116%2C%200\ Este proyecto es mi intento de crear un manejador de shells rápido, fácil de usar y a la vez repleto de funciones con una interfaz atractiva. Aviso: ten en cuenta que esto todavía está en desarrollo, y sigo trabajando en algunas de las funciones clave,...
CVE-2025-71402
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
EUVD-2025-210584
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
CVE-2025-71402 better-auth before 1.4.0 Session Revocation via Forged Cookie
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
CVE-2025-71402 better-auth before 1.4.0 Session Revocation via Forged Cookie
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
CVE-2025-71402
The CVE affects better-auth versions >1.3.34 and
CVE-2025-71402
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
CVE-2025-71402 better-auth before 1.4.0 Session Revocation via Forged Cookie
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
CVE-2025-71402: Improper Verification of Cryptographic Signature
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...
PYSEC-2026-360 Session Fixation in ipsilon
A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active...
Exploit for CVE-2026-24061
CVE-2026-24061 Vulnerability Detection and Exploitation Tool...
GHSA-WMJR-V86C-M9JJ Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions
Summary A vulnerability was identified in the multi-session plugin for Better Auth, specifically in the /sign-out after-hook. The hook trusts raw multi-session cookies and forwards the extracted values directly to internalAdapter.deleteSessions without verifying the cookie signature. Because cook...
Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions
Summary A vulnerability was identified in the multi-session plugin for Better Auth, specifically in the /sign-out after-hook. The hook trusts raw multi-session cookies and forwards the extracted values directly to internalAdapter.deleteSessions without verifying the cookie signature. Because cook...
EUVD-2025-199765
Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions...
PT-2025-62896
Name of the Vulnerable Software and Affected Versions better-auth versions 1.3.35 through 1.3.99 Description The multi-session plugin contains a flaw in the /sign-out endpoint after-hook. The system trusts raw multi-session cookies and forwards extracted values to the deleteSessions function with...