Skip to content
Threat Feed
Subscribe

Tag

Cookie-Injection

2 briefs RSS
high advisory

Adminer Cookie Injection Vulnerability via X-Forwarded-Prefix Header (CVE-2026-63771)

Adminer versions prior to 5.4.3 are vulnerable to a cookie injection flaw, which allows attackers to manipulate cookie attributes by injecting arbitrary values through the unsanitized X-Forwarded-Prefix HTTP header, enabling cross-origin authenticated requests and bypassing cookie security controls.

Adminer < 5.4.3 web-vulnerability cookie-injection cve CWE-113
1r 1t 1c
critical advisory

Tenda W308R DNS Hijacking Vulnerability (CVE-2018-25316)

Tenda W308R v2 V5.07.48 is vulnerable to cookie session weakness, allowing unauthenticated attackers to modify DNS settings via crafted GET requests to redirect user traffic to malicious sites.

W308R v2 cve-2018-25316 dns-hijacking tenda cookie-injection
2r 1t 1c