|
You are here |
xvnpw.github.io | ||
| | | | |
introvertmac.wordpress.com
|
|
| | | | | During my early years in bug bounty programs and security research, I observed firsthand how crypto projects-even those with robust blockchain protocols-often crumble due to overlooked Web2 vulnerabilities. In my 2020 blog post, Common Security Issues with Crypto Websites and APIs, I highlighted prevalent issues such as injection attacks, broken authentication, and insufficient authorization. At... | |
| | | | |
taeluralexis.com
|
|
| | | | | We'll explore what SSRF is, how to test for it and how to secure applications against it. | |
| | | | |
planetscale.com
|
|
| | | | | Learn what went into building PlanetScale webhooks from a security perspective. This article covers SSRF, webhook validation, DDoS, and more. | |
| | | | |
blog.fox-it.com
|
|
| | | Fox-IT (part of NCC Group) has uncovered a large-scale exploitation campaign of Citrix NetScalers in a joint effort with the Dutch Institute of Vulnerability Disclosure (DIVD). An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing webshells on vulnerable NetScalers to gain persistent access. The adversary can execute arbitrary commands with this webshell,... | ||