/explore
|
You are here 
|
buer.haus | ||
| | | | |
blog.kotowicz.net
A blog on security, malware, cryptography, pentesting, javascript, php and whatnots |
|
| | | | | ||
| | | | |
xbow.com
XBOW discovered a Cross-Site Scripting (XSS) vulnerability in the open-source project, 2FAuth. |
|
| | | | | ||
| | | | |
nv1t.github.io
I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail. |
|
| | | | | ||
| | | | |
guard.io
[AI summary] Nati Tal of Guardio Labs discovered a 0-day Opera browser vulnerability that allows malicious Chrome extensions to hijack Opera's private APIs for account takeover and DNS manipulation. |
|
| | | |||
