{"vulnerability": "CVE-2018-20676", "sightings": [{"uuid": "236279bf-a74f-4e63-a04f-2be9a23683fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20676", "type": "seen", "source": "https://gist.github.com/jatinjindalj/dbedf7dbe9ce357d8d404af1861f60f9", "content": "", "creation_timestamp": "2025-03-19T01:19:31.000000Z"}, {"uuid": "92465ba0-e188-4506-b01f-9bfa3b6b96fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20676", "type": "seen", "source": "Telegram/r1iWpSrC-ROEc3npz5wI6VHPnaodJX8H6x1AB5szwoCvtGY", "content": "", "creation_timestamp": "2023-11-27T11:17:29.000000Z"}, {"uuid": "e6c00fb5-9fcc-43ef-b63f-c25e7ef6ffe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20676", "type": "seen", "source": "Telegram/PUYvFWl_eGvhvTPv3ZlC0zRSIrEJDRVSL7e-LmiKULxekvI", "content": "", "creation_timestamp": "2024-08-28T20:05:46.000000Z"}, {"uuid": "a51c2986-0bc4-49f2-b428-bc55315d251c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20676", "type": "seen", "source": "https://t.me/Albonyan_1/506", "content": "TARGET : https://hly.gov.il\n\nVulnerabilities found for angularjs 1.5.8\n\nClassification\n  EPSS score: 0.01669\n  EPSS percentile: 0.81648\n  CISA KEV: False\n  CVE: CVE-2024-21490\n  CVSS V3: 7.5\n  CWE: CWE-1035\n\n\nInsecure cookie setting: missing HttpOnly flag\n\nCookie Name\nTSae786920027\n\n\nThe server responded with Set-Cookie header(s) that does not specify the HttpOnly flag:\nSet-Cookie: TSae786920027=08b707dd67ab200077fdd8a6537ff8c0de6551940c24c87e9d9d071668e0542100f04904ae5f4d4e089f533aee113000c12638c9c2a2e9d2afcbeb1e7086c916937ed9ccb8c591f064d4a6bb9d8619062a2c988e8c8d15143f3a58a3c9120be2\n\nInsecure cookie setting: domain too loose\n\nCookie Name\nTS0199da7a\n\n\nVulnerabilities found for bootstrap 3.3.7\n\n\nClassification\n  EPSS score: 0.11866\n  EPSS percentile: 0.93499\n  CISA KEV: False\n  CVE: CVE-2024-6484, CVE-2019-8331, CVE-2018-20677, CVE-2018-20676, CVE-2018-14042\n  CVSS V3: 6.4\n  CWE: CWE-1035", "creation_timestamp": "2026-08-21T05:00:03.685630Z"}]}