CVE-2009-5051

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2009-5051

Hastymail2 pre-RC8 is vulnerable: in HTTPS sessions the session cookie is not marked Secure, enabling potential interception of the cookie in transit. The OpenVAS entries describe a session-cookie security bypass; no concrete exploit details or patch/version fixes are provided in the supplied doc...

CVE-2009-5051: Undefined Security Weakness

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

PT-2011-1312

Name of the Vulnerable Software and Affected Versions Hastymail2 versions prior to RC 8 Description The issue allows remote attackers to capture the session cookie by intercepting its transmission within an http session, as the secure flag for the session cookie is not set in an https session...

Piwik < 1.1.0 Multiple Vulnerabilities

Binary data 5743.prm...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

CVE-2011-0400 affects Piwik prior to 1.1. Cookie.php fails to set the secure flag on the session cookie in HTTPS sessions, enabling potential interception of the session cookie over HTTP. This is the nature and impact as described; no remediation details are provided in the referenced documents.

CVE-2011-0400: Undefined Security Weakness

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

PT-2011-2321

Name of the Vulnerable Software and Affected Versions Piwik versions prior to 1.1 Description The issue allows remote attackers to capture the session cookie by intercepting its transmission within an http session, as the secure flag for the session cookie is not set in an https session...

Fedora 13 : openconnect-2.26-2.fc13 (2010-18053)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

Fedora 14 : openconnect-2.26-4.fc14 (2010-18055)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

Fedora 12 : openconnect-2.26-1.fc12 (2010-18032)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

Even Without Browser Flaws, Attackers Have the Upper Hand on the Web

TORONTO–If the spate of vulnerabilities and sophisticated attacks against browsers in the last couple of years has done nothing else, it’s certainly shown just how vulnerable users are as they go about their daily business on the Web. In a talk at the SecTor conference, a researcher showed severa...

Cag CMS Version 0.2 <= XSS & Blind SQL Injection Multiple

Exploit for php platform in category web applications ========================================================= Cag CMS Version 0.2 = XSS & Blind SQL Injection Multiple ========================================================= Author : Shamus Date : October, 05th 2010 Location : Solo && Jogjakart...

Cag CMS 0.2 - Cross-Site Scripting Blind SQL Injection

Cag CMS 0.2 - Cross-Site Scripting Blind SQL Injection ----------------------------------------------------------------------------------------- Cag CMS Version 0.2 Beta = XSS && Blind SQL Injection Multiple Vulnerabilities...

Cag CMS 0.2 Blind SQL Injection / Cross Site Scripting

----------------------------------------------------------------------------------------- Cag CMS Version 0.2 Beta = XSS && Blind SQL Injection Multiple Vulnerabilities ----------------------------------------------------------------------------------------- Author : Shamus Date : October, 05th...