Curated security research, vulnerabilities, advisories and tools for practitioners.

#session-hijacking

Security coverage tagged session-hijacking.

1.

CVE-2026-45453 — Microsoft SharePoint Server Workflow Pages DocURL Parameter Reflected Cross-Site Scripting

research | 2026-06-16 00:00 | CVE-2026-45453 | aretiq.ai | original ↗ | #appsec | #vulnerability-research | #xss

2.

How to hack into NFT marketplace

blog | 2026-06-11 10:27 | hackenproof.com | original ↗ | #bug-bounty | #web3 | #web-security

3.

Roundcube XSS chained with cookie tossing for full inbox access

blog | 2026-04-21 00:00 | aikido.dev | original ↗ | #ai-security | #attack-chains | #web-security

4.

ClickFix Facebook Session Hijacking Campaign Targets Creators at Scale

blog | 2026-01-21 00:00 | hunt.io | original ↗ | #cloud | #phishing | #social-engineering

5.

CVE-2025-6515 Prompt Hijacking Attack – How Session Hijacking Affects MCP Ecosystems

vulnerability | 2025-10-21 13:15 | CVE-2025-6515 | jfrog.com | original ↗ | #ai-security | #mcp | #jfrog

6.

SonicWall-CVE-2024-53704: Exploit Details

vulnerability | 2025-03-21 00:00 | CVE-2024-53704 | bishopfox.com | original ↗ | #authentication-bypass | #exploit | #session-hijacking

7.

How a Cross-Site Scripting Vulnerability Led to Account Takeover

vulnerability | 2024-11-04 17:50 | hackerone.com | original ↗ | #bug-bounty | #account-takeover | #web-security

8.

The Ultimate Guide to Finding and Escalating XSS Bugs

vulnerability | 2021-03-25 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #xss

9.

We Hacked Apple for 3 Months: Here’s What We Found

blog | 2020-10-07 00:00 | samcurry.net | original ↗ | #bug-bounty | #cloud-security | #vulnerability-research

10.

YunoHost 2.7.2 to 2.7.14 - Multiple Vulnerabilities

blog | 2018-10-30 00:00 | bishopfox.com | original ↗ | #vulnerability | #session-hijacking | #stored-xss

11.

Subsonic 6.1.1 - Multiple Vulnerabilities

blog | 2018-09-17 00:00 | CVE-2018-9282 | bishopfox.com | original ↗ | #xss | #vulnerability | #session-hijacking

12.

Wallabag 2.2.3 to 2.3.2 - Stored Cross-Site Scripting

blog | 2018-09-17 00:00 | CVE-2018-11352 | bishopfox.com | original ↗ | #open-source | #vulnerability | #session-hijacking

13.

SolarWinds Serv-U Managed File Transfer – Insufficient Session ID Entropy

advisory | 2018-05-14 00:00 | CVE-2018-10240 | bishopfox.com | original ↗ | #brute-force | #solarwinds | #session-hijacking

14.

AirDroid Web Application Authentication Flaw

vulnerability | 2015-04-15 00:00 | bishopfox.com | original ↗ | #android | #vulnerability | #advisory