Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

New tool for finding mutated XSS, $20k Chromium sandbox escape, Live bug bounty results from Ekoparty – ethical hacker news roundup

yeswehack.com | research | #bug-bounty | #php | #sandbox-escape | #chromium | #roundup | #mutation-xss

Summary

Roundup: Dom-Explorer for mutated XSS, a $20k Chromium sandbox escape, Cfreal's lightyear for PHP blind file reads, and live Bug Bounty results from Ekoparty.
Published
Collected

original ↗

Related coverage

  1. One-upmanship on sandbox escapes, record-breaking Patch Tuesdays, the next evolution in pentesting – OffSec roundup for CISOs (yeswehack.com)
  2. Cleanly Escaping the Chrome Sandbox (theori.io)
  3. Sam Curry modem masterclass, PHP threat to Windows Servers, Calls for AI safety Bug Bounties – ethical hacker news roundup (yeswehack.com)
  4. Dùng AI để tìm bug - Phần 1: Tìm SQL Injection trong PHP (blog.viettelcybersecurity.com)
  5. Dom-Explorer tool launched to reveal how browsers parse HTML and find mutated XSS vulnerabilities (yeswehack.com)
  6. Web timing attacks, Apache HTTP confusion attacks, email parsing discrepancies – ethical hacker news roundup (yeswehack.com)

back