/explore
|
You are here 
|
www.ducea.com | ||
| | | | |
nv1t.github.io
I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail. |
|
| | | | | ||
| | | | |
somic.org
Personal blog of Dmitriy Samovskiy, focuses on cloud computing, infrastructure as a service, platform as a service, infrastructure as code, Linux, devops, python, ruby, rabbitmq, Amazon Web Services EC2 |
|
| | | | | ||
| | | | |
hymd3a.hatenablog.com
(2023-10-26 - ) python?Web Server?javascript? Python?Web Server? Javascript? ?Web Server?CGI? ?javascript CGI ?CGI?... ?... |
|
| | | | | ||
| | | | |
simpleprogrammer.com
Software Engineers do the complex work so that we can enjoy efficient software solutions. They're creating the systems behind the digital tools we use at work or in our personal life. This takes strong logical thinking and problem-solving skills, as well as a deep knowledge of computer science and programming. It's a challenging, but exciting [...] |
|
| | | |||
