CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

Automattic: Process of changing email address and password does not asks old Password.

This Vulnerability could be destructive if The user uses a shared computer,or if he uses wordpress in a cyber cafe and forgets to logout from wordpress. If any user uses his wordpress account in some other computer and forgets to logout,his accounts remain insecure.I was wondered that wordpress d...

HackerOne: Report title autocompletion

Scenario: 1. Researcher uses a shared computer. 2. Researcher submits a report. 3. Researcher logs out. 4. Another person logs in, on another account. 5. Another person submits a report. 6. When entering a title, the title of the previous report submitted by the researcher is shown in...

ICQ2000A ICQmail temparary internet link vulnearbility

============================================== Vulnerability : ICQ2000A ICQwebmail temparary internet link vulnearbility Name : Gert Fokkema. Email : [email protected] Function : SecurityManager. Organization : ISAAN. http://www.fokkema.8k.com Organization : Noorderpoortcollege...