CVE-2026-39324

CVE-2026-39324 漏洞利用 PoC Rack::Session::Cookie 解密失败时回退接受未加密 Cookie | ---|--- 安全公告| GHSA-33qg-7wpp-89cq 软件包| rack-session RubyGems 受影响版本| = 2.1.1 已修复版本| 2.1.2 概述 使用 secrets: 配置的 Rack::Session::Cookie 应仅接受加密 Cookie。但当解密失败时，它不会拒绝该 Cookie，而是回退到默认的 Base64::Marshal 编码器。 攻击者可以发送一个纯文本的 Base64Marshal.dump...

CVE-2023-33733-Exploit-PoC

CVE-2023-33733-POC 免责声明 我并未发现此漏洞，也不对此负责。此脚本仅是我为CTF更轻松地利用此漏洞而构建的。原始信息请参考：https://github.com/c53elyas/CVE-2023-33733 此脚本仅是一个用于利用CVE-2023-33733的快速Python3脚本。您需要提供主机、端口、命令以及有效的会话cookie。 帮助菜单 root@kitploit: kali@kali:/Desktop$ python3 exp.py --help usage: foothold.py -h --host HOST --port PORT --cmd CM...

cve-2022-23131

cve-2022-23131 使用方式：python3 zabbix.py target Admin target为目标地址 Admin固定为管理员用户名 将生成的zbxsignedsession替换到当前目标的cookie中 点击登陆页面的sign in with Single Sign-On SAML方式登陆，即可直接进入管理界面...

CVE-2026-73292

CVE-2026-73292 – Cambio de contraseña por CSRF en Semaphore UI Solo con fines educativos y de divulgación responsable. Esta vulnerabilidad ha sido reportada en GHSA-8cj9-r88m-8945 y afecta a las versiones de semaphoreui anteriores a la 2.18.21. Vulnerabilidad El endpoint de cambio de contraseña d...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" 运行 python cve-2022-23131.py https://www.example.com Admin 利用exp生成signedsession，替换cookie，再点击 Sign in with Single Sign-On SAML 默认是Admin 尊重尺度，后果自负 萍水相逢，致敬不甘平凡的平凡人...

CVE-2021-40903

Exploit Title: Antminer Monitor 0.5.0 - 身份验证绕过 CVE: CVE-2021-40903 日期: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 漏洞作者: CQR.company / Vulnz. 厂商主页: https://github.com/anselal/antminer-monitor, https://twitter.com/intent/follow?screenname=AntminerMonitor 软件链接:...

CVE-2020-15051

CVE-2020-15051 : Artica Proxy before 4.28.030418 Community Edition allows Stored Cross Site Scripting. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

CVE-2025-63708

CVE-2025-63708 CVE ID: CVE-2025-63708 分配日期: 2025-12-11 问题类型: CWE-79（跨站脚本） 受影响产品: “AI Font Matcher”（发布于2025-10-10，nid=18425） 产品页面: https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html 发现日期: 2025-10-11 研究人员: Dylan Davis 概要 该应用程序在处理来自 webfont...

CVE-2025-63441

CVE-2025-63441 标题： 在端点 u/administrator/friends 中通过 arbitrarily supplied URL parameter param 实现反射型 XSS 摘要： 在 OSSN 应用程序的 u/administrator/friends 端点中发现了一个反射型跨站脚本（XSS）漏洞。 该漏洞允许攻击者通过任意提供的 URL 参数名称注入恶意脚本。 影响： 对网站进行虚拟涂改。 执行用户能够执行的任何操作。 将用户重定向到竞争网站。 捕获用户（管理员）的会话 cookie。 已在 OSSN 8.7 及以上版本修复 github:...

CVE-2026-82697

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

CVE-2026-82697

CVE-2026-82697 affects the sambitraj Student-Management-System (a rolling-release GitHub project) up to commit 56ba287. The vulnerable component is the session_start function, which sets a session cookie without the httponly flag , allowing JavaScript access to the session cookie. The attack is r...

CVE-2026-82697 sambitraj Student-Management-System session_start cookie httponly flag

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function sessionstart. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity...

CVE-2026-47665

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2026-47665 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

PT-2026-82331

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.15.3 Description Stored cross-site scripting occurs when file comments are stored as raw text and rendered into the page using innerHTML without sanitization. The backend only performs a length check, allowing a team...

CVE-2026-78655

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2026-78655

Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...

CVE-2026-78655 Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

EUVD-2026-64663

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...