Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Weaponizing self-xss

netspi.com | vulnerability | #bug-bounty | #privilege-escalation | #web-security | #xss | #self-xss

Summary

Demonstrates turning self-XSS into real attacks, such as payloads that fire when admins view a user's profile, and suggests logging callbacks to prove impact when reporting these findings.
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
CVE-2024-37888 – CKEditor 4 Open Link plugin XSS
CVE-2024-37888 is an XSS in CKEditor 4's Open Link plugin that lets crafted hyperlinks execute JavaScript in a victim's browser. Found during a client engagement, it affects latest plugin versions.
vulnerability · labs.cognisys.group
An Interesting XSS-Bypassing WAF
Overview
blog · netspi.com
Prototype Pollution: A Deep-Dive
A deep dive into JavaScript prototype pollution: how attackers control undeclared variables to turn weakly-typed checks into XSS on the client side or remote code execution on the server side.
blog · netspi.com
What's Happening in the Application Security Arena?
According to Gartner, 75% of the attacks are coming though web applications and not through the network. This means greater emphasis needs to be placed on application security. However, this does not appear to be happening.
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
research · lab.ctbb.show
Parse and Parse: MIME Validation Bypass to XSS via Parser Differential
A researcher demonstrates how a single comma in the Content-Type header creates a parser differential between browsers and MIME parsing libraries, letting attackers bypass validation and achieve reflected XSS.
back