Hikvision CVE-2023-28809 远程Session窃取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity Switch
• PoCCVE-2026-30965: Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration
• HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞
• PoCCVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
• PoCCVE-2026-41940: cPanel & WHM - Authentication Bypass via Session-File CRLF Injection
• PoCCVE-2023-5203: WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection
• PoCCVE-2025-28242: DAEnetIP4 METO v1.25 - Session Hijacking
• PoClaravel-sessions-exposure: Laravel Sessions Folder Exposure
• OpenCode /session 代码执行漏洞（CVE-2026-22812）
• Cal.com /api/auth/session 权限绕过漏洞（CVE-2026-23478）
• PoC深信服运维安全管理系统 protocol/session 命令执行漏洞