Skip to content
Threat Feed
Subscribe

Tag

Cookie-Injection

3 briefs RSS
high advisory

AdminNeo: Cookie attribute injection via X-Forwarded-Prefix (CVE-2026-96631)

AdminNeo versions 4.6.0 through 5.5.0 contain a vulnerability where unsanitized X-Forwarded-Prefix headers allow cookie attribute injection, potentially leading to session hijacking and credential theft.

AdminNeo web-vulnerability cve cookie-injection
2t 1c
high advisory

Adminer Cookie Injection Vulnerability via X-Forwarded-Prefix Header (CVE-2026-63771)

Adminer versions prior to 5.4.3 are vulnerable to a cookie injection flaw, which allows attackers to manipulate cookie attributes by injecting arbitrary values through the unsanitized X-Forwarded-Prefix HTTP header, enabling cross-origin authenticated requests and bypassing cookie security controls.

Adminer < 5.4.3 web-vulnerability cookie-injection cve CWE-113
1r 1t 1c
critical advisory

Tenda W308R DNS Hijacking Vulnerability (CVE-2018-25316)

Tenda W308R v2 V5.07.48 is vulnerable to cookie session weakness, allowing unauthenticated attackers to modify DNS settings via crafted GET requests to redirect user traffic to malicious sites.

W308R v2 cve-2018-25316 dns-hijacking tenda cookie-injection
2r 1t 1c