|
You are here |
www.sjoerdlangkemper.nl | ||
| | | | |
attilaolah.eu
|
|
| | | | | This is intended to be a short list of things to check before you go publish awebsite or web app (or really, anything that interacts with a browser). Itstarts with... | |
| | | | |
blog.plataformatec.com.br
|
|
| | | | | A security bug (CVE-2015-8314) has been reported in Devise's remember me system. Devise implements the "Remember me" functionality by using cookies. While this functionality works across multiple devices, Devise ended-up generating the same cookie for all devices. Consequently, if a malicious user was able to steal a remember me cookie, the cookie could be used | |
| | | | |
tom.vg
|
|
| | | | | [AI summary] This article explains cross-site and browser-based timing attacks that allow attackers to infer sensitive information from response sizes using side-channel leaks in web browsers. | |
| | | | |
blog.talosintelligence.com
|
|
| | | Cisco Talos is aware of the ongoing exploitation of CVE-2025-53770 and CVE-2025-53771 in the wild. These are path traversal vulnerabilities affecting SharePoint Server Subscription Edition, SharePoint Server 2016, and SharePoint Server 2019. | ||