Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:42:37 +0000 cnvd-2018-19052 https://cve.radiocsirt.org/vuln/cnvd-2018-19052 cnvd-2018-19052 https://cve.radiocsirt.org/vuln/cnvd-2018-19052 EUVD-2026-64831 https://cve.radiocsirt.org/vuln/euvd-2026-64831 EUVD-2026-64831 https://cve.radiocsirt.org/vuln/euvd-2026-64831 fkie_cve-2018-10813 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10813 <p>In Dedos-web 1.0, the cookie and session secrets used in the Express.js application have hardcoded values that are visible in the source code published on GitHub. An attacker can edit the contents of the session cookie and re-sign it using the hardcoded secret. Due to the use of Passport.js, this could lead to privilege escalation.</p> <p>In Dedos-web 1.0, the cookie and session secrets used in the Express.js application have hardcoded values that are visible in the source code published on GitHub. An attacker can edit the contents of the session cookie and re-sign it using the hardcoded secret. Due to the use of Passport.js, this could lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10813 GHSA-fpc8-954c-r7pq https://cve.radiocsirt.org/vuln/ghsa-fpc8-954c-r7pq <p>In Dedos-web 1.0, the cookie and session secrets used in the Express.js application have hardcoded values that are visible in the source code published on GitHub. An attacker can edit the contents of the session cookie and re-sign it using the hardcoded secret. Due to the use of Passport.js, this could lead to privilege escalation.</p> <p>In Dedos-web 1.0, the cookie and session secrets used in the Express.js application have hardcoded values that are visible in the source code published on GitHub. An attacker can edit the contents of the session cookie and re-sign it using the hardcoded secret. Due to the use of Passport.js, this could lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-fpc8-954c-r7pq gsd-2018-10813 https://cve.radiocsirt.org/vuln/gsd-2018-10813 gsd-2018-10813 https://cve.radiocsirt.org/vuln/gsd-2018-10813