66632 matches found
PT-2026-111350
Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...
CVE-2026-89120: Initialization of a Resource with an Insecure Default
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests,...
PT-2026-111637
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET SessionId cookie...
EUVD-2024-55794
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NETSessionId cookie...
PT-2026-111129
Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence affected versions not specified Description A Cross-Site Scripting XSS flaw allows an attacker to store malicious content that the application later renders. When an authenticated user accesses a...
UBUNTU-CVE-2026-108266
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...
CVE-2024-34324: Session Fixation
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NETSessionId cookie...
PT-2026-111732
Name of the Vulnerable Software and Affected Versions FrankenPHP versions prior to 1.12.5 Description In worker mode, the application server may retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE PHP SESSION at compile...
PT-2026-112505
Name of the Vulnerable Software and Affected Versions Windows Now Playing Session Manager affected versions not specified Description A use-after-free condition exists in the Windows Now Playing Session Manager. This allows an authorized attacker to elevate privileges locally on the system...
Microsoft Windows: CVE-2026-83701: Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112504
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Now Playing Session Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an applicati...
PT-2026-111144
Name of the Vulnerable Software and Affected Versions SAP ABAP Platform affected versions not specified Description An API change caused a regression that reintroduces a previously fixed authorization weakness. This allows the session manager to be opened in single transaction mode, including fro...
PT-2026-111969
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using only its client-supplied recovery-sessi...
CVE-2026-82416: Concurrent Execution using Shared Resource with Improper Synchronization
FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVEPHPSESSION at compile time. In this build configuration,...
CVE-2026-89117: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal...
CVE-2026-104875: Authorization Bypass Through User-Controlled Key
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using only its client-supplied recovery-sessi...
PT-2026-111142
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal affected versions not specified Description An unauthenticated attacker can inject malicious scripts into a URL parameter. These scripts are reflected in the server response and executed in the browser of a user...
CVE-2026-108969: Incorrect Comparison
A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...
PT-2026-116243
Уязвимость функции check token платформы для мониторинга безопасности и обнаружения угроз Wazuh связана с неверным сроком действия сеанса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности и повысить свои привилегии...
