PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

XSS Discord - Hackerone

blog.viettelcybersecurity.com | vulnerability | #bug-bounty | #xss | #discord | #hackerone | #ssrf | #open-graph
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A researcher probes Discord's Open Graph link preview, testing og:image and og:video proxy handling for SSRF and potential XSS, documenting filter behaviors and bypass attempts.
Published
Collected

Related coverage

vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
vulnerability · tenzai.com
From XSS to RCE: Two Exploit Chains in ConcreteCMS
We show how in 2026 chaining vulnerabilities is crucial for impact and how production environments differ from source code
vulnerability · yokai.hakaisecurity.io
[Pt-Br] Por Trás do Espelho: Investigando Vulnerabilidades no MagicMirror² (CVE-2026-63642, CVE-2026-63643)
# [Pt-Br] Por Trás do Espelho: Investigando Vulnerabilidades no MagicMirror² (CVE-2026-63642, CVE-2026-63643) RESEARCHER **Gabriel Alves** READ TIME**6 MINUTES** PUBLISHED**01 Oct 2026**...
vulnerability · yokai.hakaisecurity.io
[EN] Behind the Mirror: Investigating Vulnerabilities in MagicMirror² (CVE-2026-63642, CVE-2026-63643)
During an analysis of the source code of MagicMirror², an open-source platform used to turn a semi-transparent mirror into a smart display, the Yokai Research Team from Hakai Security identified two recent Server-Side Request Forgery (SSRF) vulnerabilities: CVE-2026-63642 and CVE-2026-63643. The vulnerabilities affect
Back