/explore
|
You are here 
|
www.idontplaydarts.com | ||
| | | | |
zhero-web-sec.github.io
[AI summary] A security researcher details exploitable cache poisoning and stored XSS vulnerabilities in Next.js versions 13.5.1 through 14.2.9, quantifying the six-figure bug bounty rewards earned from discovering these flaws. |
|
| | | | | ||
| | | | |
labanskoller.se
During 2021 I had access to a facility equipped with an alarm system from Securitas Direct. I had access as a regular user to Securitas Direct's My Pages at mypages-pro.securitas-direct.com, which is used to administer some aspects of one's security alarm installation. That web application suffered a CWE-384 Session Fixation vulnerability which can be used by an attacker in a so-called Man-In-The-Middle (MiTM) position. Home page of Securitas Direct My Pages In summary, if an attacker is on the same netw... |
|
| | | | | ||
| | | | |
www.sjoerdlangkemper.nl
This article describes how cross site request forgery works, how sites defend against it and how to bypass these defenses. |
|
| | | | | ||
| | | | |
brunty.me
Developer and problem solver |
|
| | | |||
