1. CRLF-Powered Desync Attacks: Beheading HTTP Streams research | 2026-08-05 23:30 | portswigger.net | original ↗ | #vulnerability-research | #attack-chains | #web-security
2. How I stole the identity of every Yahoo user blog | 2017-05-09 00:00 | samcurry.net | original ↗ | #bug-bounty | #email-security | #spoofing