140 matches found
Lexmark Printers Stored Cross-site Scripting (CVE-2020-13481)
A stored cross site scripting vulnerability has been identified in the embedded web server used in Lexmark devices. The vulnerability can be used to attack the userâs browser, exposing session credentials and other information accessible to the browser. %NASLMINLEVEL 80900 C Tenable, Inc...
Lexmark Printers Cross-site Scripting (CVE-2019-18791)
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser. This plugin only works with Tenable.ot. Please visit...
CVE-2025-47410 Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user. This...
EUVD-2020-5732
Malware in sbrugna...
EUVD-2002-0393
Malware in sbrugna...
EUVD-2021-21389
Malware in sbrugna...
EUVD-2019-8496
Malware in sbrugna...
EUVD-2023-44346
Malicious code in bioql PyPI...
EUVD-2022-29760
Malicious code in bioql PyPI...
EUVD-2023-24302
Malicious code in bioql PyPI...
EUVD-2022-28957
Malicious code in bioql PyPI...
EUVD-2024-48346
Malicious code in bioql PyPI...
EUVD-2024-21323
Malicious code in bioql PyPI...
IBM Copy Services Manager Cross-Site Scripting Vulnerability
IBM Copy Services Manager is IBM's data replication management software for simplifying and automating data replication operations in enterprise storage environments. A cross-site scripting vulnerability exists in IBM Copy Services Manager 6.3.13, which stems from insufficient filtering and...
CVE-2025-7774
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions...
CVE-2025-7774 Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions...
Rockwell Automation 5032-CFGB16M12P5DR 安全漏洞
The Rockwell Automation 5032-CFGB16M12P5DR is a security controller module from Rockwell Automation. A security vulnerability exists in the Rockwell Automation 5032-CFGB16M12P5DR that stems from intercepted session credentials that can be used to perform privileged operations within 3 minutes...
Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero
Google has announced that it's making a security feature called Device Bound Session Credentials DBSC in open beta to ensure that users are safeguarded against session cookie theft attacks. DBSC, first introduced as a prototype in April 2024, is designed to bind authentication sessions to a devic...
GHSA-F24X-RM6G-3W5V Directus tokens are not redacted in flow logs, exposing session credentials to all admin
Summary When using Directus Flows with the WebHook trigger, all incoming request details are logged including security sensitive data like access and refresh tokens in cookies. Impact Malicious admins with access to the logs can hijack the user sessions within the token expiration time of them...
CVE-2025-49653 Exposure of sensitive Information allows account takeover
Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management platform...