CVE-2026-43930

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.76 and 9.9.0-alpha.2, a race condition in the MFA SMS one-time password OTP login path allows two concurrent /login requests carrying the same OTP to both succeed and both receive...

Exploit for CVE-2025-38561

CVE-2025-38561 ksmbd: Preauh...

PT-2025-33760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to the fix Description The issue relates to a race condition within the Preauh HashValue function of the ksmbd component in the Linux kernel. This occurs when a client sends multiple session setup requests to ksmbd...

CodeIgniter authorization issue vulnerabilities

CodeIgniter is an open source web framework written in PHP. An authorization issue vulnerability exists in CodeIgniter versions prior to 4.2.11, which stems from an attacker obtaining a session cookie when the application uses multiple session cookies, and the session handler is set to...

CVE-2021-35115

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile...

Cisco Unified MeetingPlace Multiple Session Weaknesses

According to its self-reported version number, the installation of Cisco Unified MeetingPlace hosted on the remote web server may be affected by multiple session weaknesses : - The application fails to invalidate a session upon a logout action, which makes it easier for remote attackers to hijack...