Explore >> Select a destination
|
You are here 
|
blog.atx.name | ||
| | | | |
nv1t.github.io
|
|
| | | | | I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail. | |
| | | | |
ananthakumaran.in
|
|
| | | | | ||
| | | | |
aarol.dev
|
|
| | | | | Anyone who has implemented a simple HTTP 1.1 server can tell you that it is a really simple protocol. Basically, it's a text file that has some specific ... | |
| | | | |
shibumi.dev
|
|
| | | How to move your nginx webserver configuration to a more modern webserver called caddy. Caddy has several advantages like automated TLS | ||
