Lucene search
+L

966 matches found

EUVD
EUVD
added 2026/09/11 1:57 p.m.6 views

EUVD-2026-76108

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

6.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 6:31 a.m.6 views

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 is a critical unauthenticated out-of-bounds read in Citrix NetScaler ADC/Gateway Gateway or AAA vServer mode. A single crafted request can dump memory containing...

9.3CVSS8.1AI score0.99953EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/10 11:57 p.m.4 views

vertx-web-xsrf

Overview The CSRFHandlerImpl io.vertx.ext.web.handler.impl.CSRFHandlerImpl in Vert.x Web does not create CSRF Tokens that are unique per user session. A malicious website can still perform CSRF by obtaining a valid CSRF token and adding it to a HTML form and then submitting the form to the...

5.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/09/10 5:47 p.m.9 views

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks usef...

8CVSS0.00126EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2026/09/09 2:23 p.m.8 views

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence AI user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:57 p.m.5 views

CVE-2025-5777

CVE-2025-5777 — Citrix NetScaler “CitrixBleed 2” 内存泄露 由 Sentinel AI Defense 撰写的研究报告。仅作防御性分析——此处不发布任何可用的漏洞利用 或 PoC。 最初 CitrixBleed 的续作:NetScaler ADC/Gateway 认证端点上的越界读取漏洞,可将服务器内存片段(包括会话令牌)通过 HTTP 响应直接返还给未认证的攻击者。 📄 完整文章:https://sentinelaidefense.com/posts/cve-2025-5777-citrixbleed-2.html 概述...

9.3CVSS8.2AI score0.99953EPSS
SaveExploits20References1
Nuclei
Nuclei
added 2026/09/08 9:47 a.m.15 views

DAEnetIP4 METO v1.25 - Session Hijacking

DAEnetIP4 METO v1.25 contains improper session management in the /loginok.htm endpoint, letting attackers hijack sessions, exploit requires attacker to control or intercept session tokens. id: CVE-2025-28242 info: name: DAEnetIP4 METO v1.25 - Session Hijacking author: 0xAkoko severity: high...

9.8CVSS5.9AI score0.01805EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/04 8:17 p.m.6 views

CVE-2026-53603

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS0.00204EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/04 7:40 p.m.36 views

CVE-2026-53603 nebula-mesh: Operator session tokens stored in plaintext in the database

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS0.00204EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/04 7:40 p.m.5 views

CVE-2026-53603 nebula-mesh: Operator session tokens stored in plaintext in the database

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS5.7AI score
SaveExploits0References5
NVD
NVD
added 2026/08/25 12:16 p.m.10 views

CVE-2026-79665

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.8CVSS0.00352EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.11 views

EUVD-2026-65449

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.8CVSS5.4AI score0.00352EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 11:33 a.m.4 views

CVE-2026-79665 Ech0 before 4.5.1 Authorization Bypass via Session Tokens

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.7CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/08/25 11:33 a.m.27 views

CVE-2026-79665

Ech0 before 4.5.1 is affected by an authorization bypass vulnerability. The root cause is that session tokens skip scope validation in the RequireScopes middleware , enabling logged-in non-admin users to access admin endpoints. An attacker with a valid low-privilege session token can read system ...

8.8CVSS5.4AI score0.00352EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/19 9:34 p.m.40 views

CVE-2026-76366 Information Disclosure through the REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer REST API filtering on playbook runs to recover session tokens that compromise all data available to the affected user. The information disclosure is possible because Splunk SOAR...

6.5CVSS0.00293EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/13 10:18 a.m.9 views

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

7.4CVSS5.5AI score0.00296EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2026/08/13 10:01 a.m.16 views

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

7.4CVSS5.5AI score0.00296EPSS
SaveExploits0References10
NVD
NVD
added 2026/08/07 6:17 p.m.13 views

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

6.3CVSS0.00142EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/07 3:17 p.m.16 views

CVE-2026-19264

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...

9.8CVSS0.00771EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/08/06 9:33 p.m.46 views

Cross-site Scripting (XSS)

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the draftName field in the control panel rendering process. An attacker can execute arbitrary JavaScript in the session of higher-privileged users by crafting a...

6.4CVSS5.3AI score0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder