Search Vulnerabilities

MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection

Digiwin｜EasyFlow .NET - Session Fixation

Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks

Spring Framework Escalation via Session Fixation in WebFlux

tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation

Session Fixation in QuickCMS

Gradio < 6.15.0 Cookie Injection via Shared Proxy Client

Apache Shiro: Session fixation: new session is not created after login by default

Turborepo: Login callback CSRF/session fixation

Visual Studio Code Elevation of Privilege Vulnerability

Session Fixation in Authentication leads to Session Hijacking

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8

OAuth2 Proxy: Session cookie not cleared when rendering sign-in page

Session Fixation in Chamilo LMS

MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay

OpenBao lacks user confirmation for OIDC direct callback mode

Session Fixation in Bludit

HCL Aftermarket DPC is affected by Session Fixation

AVideo has Session Fixation via GET PHPSESSID Parameter With Disabled Login Session Regeneration

OliveTin: Session Fixation - Logout Fails to Invalidate Server-Side Session