/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.takemyhand.xyz
Escalating subdomain takeovers to steal cookies by abusing document.domain
| | educatedguesswork.org
Understanding The Web Security Model, Part IV: Cross-Origin Resource Sharing (CORS)
4.3 parsecs away

Travel
| |
| | opnsec.com
[CVE-2016-9263] XSF vulnerability in WordPress [UPDATED] | OpnSec
5.1 parsecs away

Travel
| | Please patch this issue on your WordPress websites immediately and ask WordPress to release a patched version before I publicly release technical details about this on Oct 19th 2017 What is the vulner
| | blog.plataformatec.com.br
Improve remember me cookie expiration in Devise (CVE-2015-8314) « Plataformatec Blog
4.6 parsecs away

Travel
| | A security bug (CVE-2015-8314) has been reported in Devise's remember me system. Devise implements the "Remember me" functionality by using cookies. While this functionality works across multiple devices, Devise ended-up generating the same cookie for all devices. Consequently, if a malicious user was able to steal a remember me cookie, the cookie could be used
| | blog.cloudflare.com
Modifying HTTP response headers with Transform Rules
17.1 parsecs away

Travel
| HTTP response headers can now be modified with Cloudflare Transform Rules.