https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:47:17.001102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-6545 CVE-2016-6545 — iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request 2026-10-03T05:47:17.016277+00:00

Affected: iTrack Easy

Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this implementation, sessions can only be terminated when the user changes the associated password.