User Impersonation

Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to User Impersonation via the OCSESSID cookie. An attacker can gain unauthorized access to user accounts by injecting arbitrary values into the session cookie, allowing session takeover...

CVE-2026-42365

GeoVision GeoVision LPC2011/LPC2211 Web Interface (version 1.10) exposes a session cookie vulnerability that allows authentication bypass through a crafted sequence of HTTP requests and brute-forcing session cookies. The CVE notes a network‑based, low‑complexity exposure with no user interaction ...

CVE-2008-7311

The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.actioncontrollersession hash value aka secret key, which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the...

EUVD-2012-0430

Malware in sbrugna...

EUVD-2009-3565

Malware in sbrugna...

EUVD-2020-6401

Malware in sbrugna...

EUVD-2018-16086

Malware in sbrugna...

EUVD-2021-19485

Malware in sbrugna...

EUVD-2020-20157

Malware in sbrugna...

EUVD-2020-27988

Malware in sbrugna...

EUVD-2019-14295

Malware in sbrugna...

EUVD-2012-5746

Malware in sbrugna...

EUVD-2016-0407

Malware in sbrugna...

EUVD-2016-0388

Malware in sbrugna...

EUVD-2016-3388

Malware in sbrugna...

EUVD-2022-5763

Malicious code in bioql PyPI...

EUVD-2024-0497

Malicious code in bioql PyPI...

CVE-2025-2611 ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

CVE-2025-2611 ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

CVE-2023-47294

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie...