CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

UbuntuCve•added 2026/05/25 9:16 p.m.•7 views

CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

6.5CVSS5.8AI score0.00024EPSS

Exploits0References4

Debian CVE•added 2026/05/25 8:19 p.m.•7 views

CVE-2026-43828

6.5CVSS5.8AI score0.00024EPSS

Exploits0

Gitee•added 2020/11/03 7:53 p.m.•2 views

Exploit for Use of Hard-coded Cryptographic Key in Apache Aurora

Awesome-shiro CVE-2016-4437 Shiro=1.2.4反序列化，爆破模块和key、代码执行、反弹shell的工具 ---- 漏洞原因因为shiro对cookie里的rememberme字段进行了反序列化，所以如果知道了shiro的编码方式，然后将恶意命令用它的编码方式进行编码并放在http头的cookie里，在shiro对提交的cookie的rememberme字段进行反序列化时，也就执行了插入的命令，最终造成了命令执行 shiro默认使用了CookieRememberMeManager，其处理cookie的流程是：...

9.8CVSS7AI score0.94251EPSS

Exploits9

Veracode•added 2019/12/23 3:6 a.m.•9 views

Authentication Bypass

scheb/two-factor-bundle is vulnerable to authentication bypass. The 2-factor authentication can be bypassed by logging in with the REMEMBERME cookie and subsequently removing the SESSIONID key...

3.6AI score

Exploits0

myhack58•added 2017/01/18 12:0 a.m.•36 views

Apache shiro 1.2.4 version of remote command execution vulnerability details-vulnerability warning-the black bar safety net

Search, I found online about apache shiro 1.2.4 version of the vulnerability consolidation report to write too simple, is perhaps the bigwigs speaking of professional, I this noob can't read the reason, specially in the local do a full show. First from the shiro official get shiro 1.2.4 of the...

7.2AI score

Exploits0

Atlassian•added 2012/09/18 3:36 p.m.•15 views

rememberme cookie is not cleared when user changes password in Confluence

When a user changes their password, the seraph cookie is still valid. To avoid this, all entries for the changed user in the table remembermetoken should be removed...

1.7AI score

Exploits0

Atlassian•added 2012/09/18 3:36 p.m.•19 views

rememberme cookie is not cleared when user changes password in Confluence

When a user changes their password, the seraph cookie is still valid. To avoid this, all entries for the changed user in the table remembermetoken should be removed...

1.7AI score

Exploits0Affected Software1