WakaTime: Sensitive Cookie Without 'HttpOnly' Flag

hello wakatime security team i found security vulnerability:Sensitive Cookie Without 'HttpOnly' Flag when i was testing your website then i notice that there is some csrftoken cookie appare in responce but the cookie have not httponly flag.you must should set httponly flag for some following...

PT-2014-1613

Name of the Vulnerable Software and Affected Versions CFNetwork in Apple iOS versions prior to 7.1.1 CFNetwork in Apple OS X versions prior to 10.9.2 CFNetwork in Apple TV versions prior to 6.1.1 Description The issue allows remote attackers to bypass intended access restrictions by triggering th...

CVE-2012-0807

Stack-based buffer overflow in the suhosinencryptsinglecookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long...

Stack overflow

Stack-based buffer overflow in the suhosinencryptsinglecookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long...

CVE-2012-0807

Stack-based buffer overflow in the suhosinencryptsinglecookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long...

PT-2012-2882

Name of the Vulnerable Software and Affected Versions Suhosin extension versions prior to 0.9.33 Description A stack-based buffer overflow issue exists in the suhosin encrypt single cookie function of the Suhosin extension for PHP. This issue arises when the transparent cookie-encryption feature ...