https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 16:50:25 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-223 certa-2008-avi-223 https://cve.radiocsirt.org/vuln/certa-2008-avi-223 https://cve.radiocsirt.org/vuln/euvd-2026-127115 EUVD-2026-127115 https://cve.radiocsirt.org/vuln/euvd-2026-127115 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1930 <p>The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with &#34;admin&#34; to obtain administrator privileges, aka a &#34;cryptographic splicing&#34; issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.</p> <p>The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with &#34;admin&#34; to obtain administrator privileges, aka a &#34;cryptographic splicing&#34; issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-1930 https://cve.radiocsirt.org/vuln/ghsa-m86r-5c2c-w6rq <p>The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with &#34;admin&#34; to obtain administrator privileges, aka a &#34;cryptographic splicing&#34; issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.</p> <p>The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with &#34;admin&#34; to obtain administrator privileges, aka a &#34;cryptographic splicing&#34; issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.</p> https://cve.radiocsirt.org/vuln/ghsa-m86r-5c2c-w6rq https://cve.radiocsirt.org/vuln/gsd-2008-1930 gsd-2008-1930 https://cve.radiocsirt.org/vuln/gsd-2008-1930