/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 mathieu.fenniak.net
Is your Web API susceptible to a CSRF exploit? | Mathieu Fenniak
| | bogs.io
bogs.io | Complete Guide to CSRF
0.9 parsecs away

Travel
| | CSRF stands for Cross-Site Request Forgery and is one of the most "popular" web application vulnerabilities
| | introvertmac.wordpress.com
Understanding CSRF attacks | what I'm breaking...
1.3 parsecs away

Travel
| | What is CSRF "Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts." - Wikipedia CSRF is at 8th position in OWASP...
| | www.vlent.nl
How does the Django Cross-site request forgery protection work? | Mark van Lent's weblog
1.4 parsecs away

Travel
| | [AI summary] The article explains that Django's Cross-site request forgery (CSRF) protection relies on a 'Double Submit Cookie' mechanism requiring both a cookie and a form parameter, and demonstrates how the validation works and why it prevents malicious requests.
| | www.thezdi.com
Zero Day Initiative - Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
25.4 parsecs away

Travel
| [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution.