---
id: 4821
title: "ORM leaks, CSRF is alive, lockpicking lessons – ethical hacker news roundup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/orm-leaks-csrf-hacker-roundup"
published_at: "2024-08-14T13:56:00Z"
tags: ["web-security", "path-traversal", "csrf", "race-condition", "orm", "roundup"]
phying_url: "https://phying.com/item/4821"
lang: en
---

# ORM leaks, CSRF is alive, lockpicking lessons – ethical hacker news roundup

## Summary

Roundup: Elttam's ORM leak research on Django and Prisma, Doyensec reviving CSRF via client-side path traversal, race-condition bugs, and ServiceNow exploit chains.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2024-08-14T13:56:00Z
- **Original:** https://www.yeswehack.com/news/orm-leaks-csrf-hacker-roundup
- **Phying News:** https://phying.com/item/4821