CVE-2025-36252

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3) and Diamondback Tape Library are vulnerable to CVE-2025-36252 due to Insufficient Session Expiration (CWE-613). The Web UI fails to generate a new session identifier after successful authentication, allowing pre-authentication ide...

CVE-2021-40223

CVE-2021-40223 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Stored XSS Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input on Security...

CVE-2023-43317

CVE-2023-43317 A normal user can elevate their privileges via the userPermissionsLIst parameter in Session Storage component. to gain unauthorized access to administrative-level resources and features. This could lead to unauthorized data access, data modification, and other actions that are...

CVE-2026-36392

CVE-2026-36392: Stored XSS in RISE CRM Item Title Field Summary A stored cross-site scripting XSS vulnerability exists in the item title field of RISE CRM RISE - Ultimate Project Manager & CRM versions = 3.9.6. An authenticated administrator can inject arbitrary JavaScript into an item's title,...

CVE-2021-27513-CVE-2021-27514

exploit-eyesofnetwork Version 5.3.5 up to 5.3.10 CVE-2021-27513 / CVE-2021-27514 The brute-forcing can take a very long time on non production environement cause "sessionid" is created at every login but every sessionid generated by the app are valide for the PoC i deployed an EyesOfNetwork...

CVE-2026-106582

A flaw was found in OpenSSH. When session compression is enabled, an attacker with access to a shared Secure Shell SSH connection can exploit the compression state shared across multiplexed channels. By analyzing changes in transmitted packet lengths caused by repeated data patterns, the attacker...

CVE-2026-105815

The TP-Link Tapo C210 (V3.60) is vulnerable to an Improper Authentication flaw (CWE-287) where unauthenticated DS JSON API requests expose shared credential material and cryptographic metadata. An unauthenticated attacker on an adjacent network can leverage this exposed material as an administrat...

GO-2026-6775 Nginx UI OTP secure-session step-up is missing on sensitive mutation routes in github.com/0xJacky/Nginx-UI

Nginx UI OTP secure-session step-up is missing on sensitive mutation routes in github.com/0xJacky/Nginx-UI...

GO-2026-6799 Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools in github.com/0xJacky/Nginx-UI

Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools in github.com/0xJacky/Nginx-UI...

GO-2026-6750 Vikunja: Scoped API token can mint unrestricted OAuth session credentials in code.vikunja.io/api

Vikunja: Scoped API token can mint unrestricted OAuth session credentials in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

GO-2026-6715 Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes in code.vikunja.io/api

Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

CVE-2023-31852

CVE-2023-31852 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/config has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

Tomcat-CVE-2025-24813

Conditions of Use DefaultServlet write function is enabled: it needs to web.xml be configured inreadonly=false Partial PUT request support: Tomcat supports block upload by default Enable file session persistence: need to context.xml configure PersistentManager and FileStore There is a...

zabbix-cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. replace zbxsignedsession to cookie 2. sign in with Single Sign-On SAML author: @random-robbie、@jweny and @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

CVE-2026-73292

CVE-2026-73292 – CSRF Password Change in Semaphore UI For educational and responsible disclosure purposes only. This vulnerability has been reported in GHSA-8cj9-r88m-8945 and affect semaphoreui versions below 2.18.21. Vulnerability The password change endpoint of Semaphore UI does not implement...

CVE-2026-112769

Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the Session class when creating sessions. An authenticated user, or anyone holding that user's session token, can send POST requests to /sessions or /classes/Session to...

c0ntextomy

c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: JWT CheckToken Never Re-Validates Account State Product: go-shiori/shiori File: internal/domains/auth.go CWE: CWE-613 — Insufficient Session Expiration CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 High CNA: Turan Security · CVE record Description Shiori's CheckToke...

SMB-Session-Spoofing

/ | / || \ / | / | / | \ --.| . . || |/ / \ --. \ --. | | --. \ |/| || \ --. / / / | |/ | ' \ --. \ ' \ / \ / | / \ '| // / | | || |/ / // / /\ \ \ | | | | | // / | | | | || / | /| |// / ||//|/|| || /| ./ / /|| || | | || Welcome! This is a utility that can be compiled with Visual...

CVE-2023-31851

CVE-2023-31851 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/status has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...