共收录 62 条相关情报。
← 返回所有主题CVE-2026-115910
### Summary The generic OpenID Connect backend (`OpenIdConnectAuth` and every backend built on it) stores the `nonce` i
CVE-2026-115910
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_co
CVE-2026-107226
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT
CVE-2026-105233
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b
CVE-2026-104469
YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions be
CVE-2026-104469
YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions be
CVE-2026-71302
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T
CVE-2026-71302
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T
CVE-2026-101268
If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's custo
CVE-2026-57179
### Impact The partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it to
CVE-2026-95828
A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the fil
CVE-2026-95828
A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the fil
CVE-2026-79312
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session._load() reads session_id directly from the re
CVE-2026-81181
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for pro
CVE-2026-81181
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for pro
CVE-2026-86688
Session Fixation vulnerability in team-alembic ash_authentication allows an attacker who can plant a session identifier
CVE-2026-92984
HUBzero CMS through 2.2.32 accepts session identifiers from query strings and request variables instead of cookies alone
CVE-2026-77614
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to vers
CVE-2026-78428
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving anoth
CVE-2026-61592
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to