/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 labanskoller.se
Laban Sköllermark | Man-in-The-Middle Session Fixation in Securitas Direct My Pages
| | nv1t.github.io
ProjectSend - Stored XSS to Account Takeover
4.5 parsecs away

Travel
| | I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail.
| | mike.sherov.com
The Rise of Man In The Middle (MITM) Based Session Hijacking Attacks | Mike Sherov
3.3 parsecs away

Travel
| | Most websites offer personalized experiences powered by a "logged in" mode. In order to remember who a user is, sites place a cookie containing a unique...
| | alexsci.com
HSTS preload adoption and challenges
4.9 parsecs away

Travel
| | A review of HSTS and HSTS preload list growth
| | fhirblog.com
A REST primer - FHIR style - part 1. | Hay on FHIR
56.1 parsecs away

Travel
| In this post I'm going to talk a little about REST - REpresentational State Transfer - in the context of FHIR. The FHIR specification goes into some detail about how REST and FHIR work together, so go there for more details. As mentioned in a previous post, FHIR works across many different interoperability paradigms, but...