1. Roundcube XSS chained with cookie tossing for full inbox access blog | 2026-04-21 00:00 | aikido.dev | original ↗ | #ai-security | #attack-chains | #web-security
2. Cookie Chaos: How to bypass __Host and __Secure cookie prefixes research | 2025-09-03 14:46 | portswigger.net | original ↗ | #cookies | #asp-net | #unicode