2099 matches found
Exploit for CVE-2024-22120
Usage bash python exploit.py --ip --sid --hostid --phps...
PT-2024-28397
Name of the Vulnerable Software and Affected Versions GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 version 4.3.11 GL-iNet products MT3000/MT2500/AXT1800/AX1800/A1300/X300B version 4.5.16 GL-iNet products XE300 version 4.3.16 GL-iNet products E750 version 4.3.1...
CBL Mariner 2.0 Security Update: curl (CVE-2024-0853)
The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0853 advisory. - curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapli...
CVE-2024-4447
In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...
DotCMS 安全漏洞
DotCMS is an open source content management system written in Java by DotCMS, Inc. for managing content and content-driven sites and applications. A security vulnerability exists in DotCMS. An attacker exploiting the vulnerability could mimic other users by session ID...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Follow-Redirects_Project Follow-Redirects
CVE-2022-0155 Proof-of-Concept PoC This repository contains...
CVE-2024-36450
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...
CVE-2024-36450
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...
CVE-2024-36450
Webmin is affected by CVE-2024-36450 due to a cross-site scripting flaw in sysinfo.cgi present in Webmin versions prior to 1.910. Exploitation can cause arbitrary scripts to run in the victim’s browser, with potential session ID exposure, webpage alteration, or server disruption. The vulnerabilit...
CVE-2024-36450: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...
ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
PT-2024-28042
Name of the Vulnerable Software and Affected Versions GoFiber versions prior to 2.52.5 Description A session middleware issue in GoFiber versions 2 and above allows users to supply their own session id value, resulting in the creation of a session with that key. If a website relies on the mere...
School-Management-System SQL Injection Vulnerability
School-Management-System is a school management system by the individual developer Lahiru Danushka. A SQL injection vulnerability exists in School-Management-System version 1.0.0 and 1.0.1, which stems from a parameter sid in the file examresults-par.php that can lead to SQL injection...
PT-2024-20444
Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description A session fixation issue allows an attacker to bypass the server's authentication by tricking an administrator or any user into authorizing a session ID of their choosing. Recommendations At t...
CVE-2024-37183
Plain text credentials and session ID can be captured with a network sniffer...
CVE-2024-37183
Westermo L210-F2G Lynx (CVE-2024-37183) is affected. The vulnerability allows capture of plain text credentials and session IDs over the network due to cleartext transmission. CVSS v3.1 base score 7.5 indicates high severity with Network attack vector and low access complexity; confidentiality im...
CVE-2024-37183 Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
Plain text credentials and session ID can be captured with a network sniffer...
CVE-2024-37183 Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
Plain text credentials and session ID can be captured with a network sniffer...
PT-2024-27361 · Westermo · L210-F2G Lynx +2
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows plain text credentials and session ID to be captured with a network sniffer. Recommendations: At the moment, there is no information about a newer version that contains a...