CVE-2018-1962

CVE-2018-1962 affects IBM Security Identity Manager Virtual Appliance versions 7.0.1–7.0.1.10. Root cause: failure to invalidate session tokens on logout, enabling local attackers to log into a closed browser session. Reported impact is limited to local access scenarios with session termination b...

Apache Guacamole Information Disclosure Vulnerability

Apache Guacamole is a clientless remote desktop gateway from the American Apache Apache Software Foundation. The product supports protocols such as VNC, RDP and SSH. A security vulnerability exists in Apache Guacamole versions 0.9.4 through 0.9.14, which stems from the program's failure to use th...

Nuuo Central Management Server User Session Token Bruteforce

Nuuo Central Management Server below version 2.4 has a flaw where it sends the heap address of the user object instead of a real session number when a user logs in. This can be used to reduce the keyspace for the session number from 10 million to 1.2 million, and with a bit of analysis it can be...

CVE-2018-19718

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

CVE-2018-19718

Adobe Connect 9.8.1 and earlier are affected by CVE-2018-19718, a session token exposure vulnerability that could lead to exposure of the privileges granted to a session. Affected product: Adobe Connect (versions 9.8.1 and earlier). Root cause: session token exposure. Impact: potential leakage of...

CVE-2018-19718

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

Adobe Connect <= 9.8.1 Exposure Of The Privileges Granted To A Session Vulnerability (APSB19-05)

The version of Adobe Connect installed on the remote host is prior to 10.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-05 advisory. - Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposu...

Adobe Patches Important Bugs in Connect and Digital Edition

Adobe released patches for two bugs rated “important” in its Adobe Digital Edition and Adobe Connect products. The two important vulnerabilities, patched Tuesday, include an information disclosure bug in Adobe’s ebook reader software program, Digital Edition; as well as a session token exposure b...

APSB19-05 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves an important session token exposure vulnerability...

Cross-Site Scripting (XSS)

hsweb-system-workflow-local is vulnerable to cross-site scripting XSS. A lack of validation on the type parameter in FlowableModelManagerController.java allows a remote attacker to inject arbitrary Javascript into a victim's browser to steal session token or perform unwanted actions on behalf of...

Cross-Site Scripting (XSS)

validator is vulnerable to cross-site scripting. A remote attacker is able to bypass XSS filters via nested forbidden strings to inject arbitrary Javascript into a victim’s browser to steal session tokens or perform unwanted actions on behalf of the user...

CVE-2018-9082

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their...

CVE-2018-3914

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker ca...

PT-2018-16306 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: A stack-based buffer overflow issue exists in the video-core HTTP server due to the retrieval of database fields. The strcpy call overflows a destination buffer of 2000 bytes. A...

Samsung SmartThings Hub STH-ETH-250 video-core HTTP server buffer overflow vulnerability

Samsung SmartThings Hub STH-ETH-250 is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the credential processor of the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 using...

tendrl-api: Improper cleanup of session token can allow attackers to hijack user sessions

Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user...

Weblate: Broken Authentication – Session Token bug

I found a broken authentitication vuln POC: 1- Create a https://demo.weblate.org/accounts/profile/ account 2- Confirm your email 3- Now request a password reset for your account. 4- Don’t use the password reset link that was sent to your email. 5- Login to your account, remember don’t use first t...

CVE-2018-2451

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

Session fixation

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

CVE-2018-2451

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...