https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:53:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207367 EUVD-2026-207367 https://cve.radiocsirt.org/vuln/euvd-2026-207367 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28809 <p>Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.</p> <p>Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28809 https://cve.radiocsirt.org/vuln/ghsa-g8rj-9f8j-3x3w <p>Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.</p> <p>Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.</p> https://cve.radiocsirt.org/vuln/ghsa-g8rj-9f8j-3x3w https://cve.radiocsirt.org/vuln/gsd-2023-28809 gsd-2023-28809 https://cve.radiocsirt.org/vuln/gsd-2023-28809 https://cve.radiocsirt.org/vuln/icsa-23-285-14 <p>Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user. Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.</p> <p>Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user. Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.</p> https://cve.radiocsirt.org/vuln/icsa-23-285-14