2 matches found
tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments
A flaw was found in Tornado. A remote attacker could exploit this vulnerability by injecting specially crafted characters into the domain, path, and samesite arguments when setting cookies. This could lead to cookie attribute injection, potentially allowing for information disclosure or...
GetEngine.pl - скрипт для определения имени\версии движка
Написал на PERL'е работает по локальной базе base.getEngine в базе более 70 движков запуск: ./ge.pl site.com запуск с подробной инфой: ./ge.pl site.com -debug Код: ./ge.pl rdot.org/forum/ GetEngine v0.1 eLwauxc2009 Found Engine: vBulletin version 3.8.5 clientscript/vbulletinglobal.js Код: ./ge.pl...