Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell In the PHP session mechanism, there are two hig...

OpenBao session mechanism vulnerability

Versions prior to OpenBao 2.6.4 and versions 2.7.x prior to 2.7.1 contain a session mechanism vulnerability. This vulnerability arises because, when renewing tokens issued by the Kubernetes Auth method, it fails to verify whether the originally used service account token remains valid. As a resul...

Knime Business Hub session mechanism vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain a session mechanism vulnerability. This vulnerability stems from the absence of security attributes on sensitive cookies, which may allow unauthenticated remote attackers to compromise user sessions despite other security issues such as...

Traefik Labs Traefik session mechanism issue vulnerability

Traefik Labs Traefik versions 3.2.0 through 3.7.14 contain a vulnerability related to the session mechanism. This issue arises because the experimental FastProxy connection pool fails to keep backend connections authenticated via NTLM/Negotiate fixed to its frontend connections. As a result,...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...

Netskope Client session mechanism vulnerability

Versions of the Netskope Client prior to R142 contained a vulnerability related to the session mechanism. This vulnerability arises when the NSClient agent switches to a network with internet connectivity after connecting to a Captive Portal access point, without closing the Captive Portal. This...

IBM Storage TS4500 Library Session Mechanism Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session mechanisms. This vulnerability arises from sessions not being invalidated, which may allow authenticated users to impersonate another user on the system...

Vulnerability related to Apache Answer session mechanism issues

Versions 2.0.2 and earlier of Apache contain a vulnerability related to the session mechanism. This vulnerability stems from insufficient session invalidation mechanisms, allowing revoked users to use expired access tokens to access known private upload files...

Fastify @fastify/jwt session mechanism vulnerability

The Fastify @fastify/jwt versions prior to 10.2.5 have a session mechanism vulnerability. This vulnerability arises from the use of the top-level sign and verify methods, which replace rather than merge the global default configurations. As a result, global default protections such as token...

Go-Vikunja Vikunja session mechanism issues

go-vikunja Vikunja versions 0.22.0 to 2.7.0 had a session mechanism vulnerability. This vulnerability stemmed from improper access revocation. In this issue, collaborators who have been revoked can still receive task titles and descriptions through the webhook they created, including content...

Go-Vikunja Vikunja session mechanism issues

In versions of go-vikunja from 2.3.0 to 2.7.0, there was a vulnerability related to the session mechanism. This vulnerability occurred because handleAuth did not recheck the JWT sid claim and the sessions table. As a result, WebSocket access remained valid after the session was revoked. Attackers...

Apache Airflow session mechanism vulnerability

Versions of Apache Airflow prior to 0.11.1 have a session mechanism vulnerability. This vulnerability arises from the improper termination of sessions when users log out. Although the logout route revokes the issued tokens, KeycloakJWTMiddleware issues new, unrevoked tokens in the same response. ...

Deserialization of untrusted data

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a malicious attacker can achieve Remote Code Execution RCE via a maliciously crafted Java deserialization gadget chain leveraged against the Ratpack session store. If one's application does not use Ratpack's session...

CVE-2020-6291

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration...

Session fixation

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration...

CVE-2020-6291

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration...

CVE-2020-6291: Insufficient Session Expiration

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration...

Web Application Security : PHP SuperGlobal Variables are vulnerable to Hackers

Hackers are focusing on vulnerabilities in the PHP web application development platform threatening 80% websites in the world, including many big website i.e. Facebook and Wikipedia. PHP has several predefined variables that are called SuperGlobals i.e. POST, GET, COOKIES, FILES etc. Imperva...

CVE-2006-5862

Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized NAV before 3.1.1 allows attackers with filesystem write access to have an unknown impact via unknown attack vectors...

CVE-2006-5862: Undefined Security Weakness

Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized NAV before 3.1.1 allows attackers with filesystem write access to have an unknown impact via unknown attack vectors...