CVE-2026-108803: Insufficient Session Expiration

A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted earl...

CVE-2026-108785: Insufficient Session Expiration

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

PT-2026-110919

Name of the Vulnerable Software and Affected Versions Flower versions prior to 2.2.0 Description Cross-site request forgery occurs because Tornado xsrf cookies are disabled and the OAuth session cookie lacks the SameSite attribute. This allows attackers to trick authenticated users into visiting...

PT-2026-111109

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 Description A remote authenticated attacker can obtain sensitive information because session tokens are exposed within the HTML response. Recommendations At the moment, there is no...

PT-2026-110786

Name of the Vulnerable Software and Affected Versions ZITADEL versions 3.0.0 through 4.19.1 Description An authentication bypass exists in the Login V2 UI. Unauthenticated attackers can obtain session tokens of other users by forging unsigned session cookies. By guessing time-ordered session IDs...

CVE-2026-93892: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...

CVE-2026-109559: Incorrect Authorization

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to...

CVE-2026-84321: Insufficient Session Expiration

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-token records without a long Token value, but DeleteUserTokens invalidates cached entries only when the long Token field is nonempty. A revoked short token can therefore remain i...

CVE-2026-109290: Improper Neutralization of Input During Web Page Generation

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

CVE-2026-84315: Missing Authorization

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession to multiple authenticated mutation routes even though OTP-enabled users are expected to present a fresh X-Secure-Session-ID for sensitive actions. A stolen authenticated session...

PT-2026-110703

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.11.3 Description A cross-origin message handling issue exists in the SyncStatsModal component. This allows an external website to steal a signed-in user's session token by sending unvalidated verify:chat...

CVE-2026-109426: Cleartext Storage of Sensitive Information

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than...

EulerOS 2.0 SP11 : python-requests (EulerOS-SA-2026-4370)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...

EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2026-4381)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset...

PT-2026-110610

Name of the Vulnerable Software and Affected Versions AnyDesk versions prior to 8.0.3 Description A heap-based buffer overflow occurs in the session protocol stream packet handler for mode 5 because a payload length value is not validated. This allows unauthenticated remote attackers to execute...

PT-2026-110707

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.1 through 0.11.3 Description Authenticated users can execute scripts by uploading crafted DOCX attachments. The issue resides in DocxPreview.svelte and occurs when attackers embed an OOXML altChunk HTML part or a...

evilginx2

Evilginx 3.0 Evilginx es un framework de ataque de intermediario man-in-the-middle utilizado para el phishing de credenciales de inicio de sesión junto con cookies de sesión, lo que permite eludir la protección de autenticación de dos factores. Esta herramienta es la sucesora de Evilginx, lanzada...

openclaw-dashboard

Panel de Control del Agente OpenClaw Un panel de monitoreo en tiempo real, seguro y atractivo para agentes OpenClaw. Rastrea sesiones, monitorea el uso de la API, visualiza costos, gestiona archivos de memoria y mantén un seguimiento de la salud del sistema, todo en un solo lugar. Capturas de...

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie Qué es Cowrie Cowrie es un honeypot SSH y Telnet de interacción media a alta diseñado para registrar...

ssh-mitm

SSH-MITM - auditorías ssh simplificadas Una herramienta interactiva de intercepción SSH para auditorías de seguridad autorizadas. Intercepta sesiones, monitoriza el tráfico en vivo, inyecta comandos y manipula transferencias de archivos — todo en tiempo real. !Follow me on...