/explore
|
You are here 
|
blog.kotowicz.net | ||
| | | | |
www.sjoerdlangkemper.nl
This article describes how cross site request forgery works, how sites defend against it and how to bypass these defenses. |
|
| | | | | ||
| | | | |
statuscode.ch
We're constantly working on adding more security features and hardenings to Nextcloud, after all it's your data and it has to be protected properly. While the Nextcloud 9 release fixes a critical security issue (we have informed upstream about this but in the meanwhile recommend upgrading as soon as possible) it also adds another new... |
|
| | | | | ||
| | | | |
nv1t.github.io
I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail. |
|
| | | | | ||
| | | | |
yasoob.me
Hi everyone! I was working on a React project these last couple of weeks and I had to implement login functionality. I searched around and most of the solutions I found relied on Redux or some other huge dependency that I wasnt already using in my project. I didnt want to introduce a big dependency so decided to continue looking. In the end, I found a wonderful library by Oleg Babichev that allowed me to implement the login functionality on the front-end fairly easily. |
|
| | | |||
