Curated security research, vulnerabilities, advisories and tools for practitioners.

#csrf

Security coverage tagged csrf.

1.

‘I found a CSRF and could deploy code through an enterprise’s App Store account’: yassine_eal’s Bug Bounty story

blog | 2026-06-15 14:42 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #app-store

2.

Web Application Security: The Controls That Still Matter Most

blog | 2026-06-06 07:00 | bugbunny.ai | Original ↗ | .md | #appsec | #web-security | #application-security

3.

Lack of isolation in agentic browsers resurfaces old vulnerabilities

blog | 2026-01-13 12:00 | blog.trailofbits.com | Original ↗ | .md | #agentic-ai | #browser-security | #data-exposure

4.

Top 10 Web Application Security Vulnerabilities Every Team Should Know

blog | 2025-10-20 00:00 | aikido.dev | Original ↗ | .md | #web-security | #xss | #deserialization

5.

Cross-site request forgery: The ultimate Bug Bounty guide to exploiting CSRF vulnerabilities

blog | 2025-09-12 07:03 | yeswehack.com | Original ↗ | .md | #bug-bounty | #browser-security | #web-security

6.

ORM leaks, CSRF is alive, lockpicking lessons – ethical hacker news roundup

blog | 2024-08-14 13:56 | yeswehack.com | Original ↗ | .md | #web-security | #path-traversal | #csrf

7.

Common Security Issues in Implementing OAuth 2.0 and How to Mitigate Them

blog | 2024-02-12 01:30 | hackerone.com | Original ↗ | .md | #appsec | #web-security | #authentication

8.

Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applications

vulnerability | 2024-01-23 06:38 | hackerone.com | Original ↗ | .md | #ruby | #web-security | #csrf

9.

Macros Demystified

blog | 2023-09-22 00:00 | netspi.com | Original ↗ | .md | #burp-suite | #web-security | #tutorial

10.

Secure your Apollo GraphQL server with Semgrep

blog | 2023-08-29 12:00 | blog.trailofbits.com | Original ↗ | .md | #graphql | #csrf | #static-analysis

11.

Web2 bug repellant instructions

blog | 2023-08-11 00:00 | osec.io | Original ↗ | .md | #web3 | #xss | #csrf

12.

CVE-2021-27927: CSRF to RCE Chain in Zabbix

vulnerability | 2021-03-08 19:09 | CVE-2021-27927 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #csrf

13.

The 10 Most Common Bugs of 2021 So Far, and How to Find Them!

blog | 2021-02-06 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #csrf

14.

Google Partner Program – GPP Top 10

blog | 2021-01-26 00:00 | bishopfox.com | Original ↗ | .md | #appsec | #access-control | #xss

15.

Winston Privacy Version 1.5.4

blog | 2020-10-27 00:00 | bishopfox.com | Original ↗ | .md | #advisory | #vpn | #csrf

16.

LibreHealth Version 2.0.0

vulnerability | 2020-07-14 00:00 | bishopfox.com | Original ↗ | .md | #sql-injection | #vulnerability | #advisory

17.

Với một vài dòng code đơn giản, tôi đã tìm CVE của Joomla như thế nào?

blog | 2020-01-03 10:21 | blog.viettelcybersecurity.com | Original ↗ | .md | #vulnerability-research | #php | #cve

18.

SFDC Secure Development Cheat Sheet

blog | 2019-12-11 00:00 | bishopfox.com | Original ↗ | .md | #secure-development | #csrf | #salesforce

19.

[Guest Post] SoundCloud Takes its Bug Bounty Program Public

vulnerability | 2019-04-18 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #xss | #bugcrowd

20.

Bug Bytes for November 16: Google Traffic Gone Haywire and New Government Initiatives

blog | 2018-11-16 00:00 | bugcrowd.com | Original ↗ | .md | #csrf | #google | #russia

21.

Eaton UPS 9PX 8000 SP - Multiple Vulnerabilities

blog | 2018-10-19 00:00 | bishopfox.com | Original ↗ | .md | #firmware | #csrf | #vulnerability-advisory

22.

Automatic session handling

blog | 2018-08-03 18:04 | portswigger.net | Original ↗ | .md | #burp-suite | #crawler | #session-handling

23.

Burp's new crawler

blog | 2018-08-02 17:24 | portswigger.net | Original ↗ | .md | #burp-suite | #crawler | #web-crawling

24.

Jirafeau Version 3.3.0 – Multiple Vulnerabilities

blog | 2018-06-06 00:00 | bishopfox.com | Original ↗ | .md | #xss | #vulnerability | #csrf

25.

Defeating CSRF Protections Through Expired cross-domain.xml Domains

blog | 2017-02-21 00:00 | netspi.com | Original ↗ | .md | #csrf | #flash | #web-pentesting

26.

XSS Bugs that Prove the Danger in ‘XSS-Fatigue’

vulnerability | 2016-10-10 00:00 | bugcrowd.com | Original ↗ | .md | #account-takeover | #xss | #bugcrowd

27.

Burp Suite is on a feature roll!

blog | 2013-03-12 14:23 | portswigger.net | Original ↗ | .md | #burp-suite | #release-notes | #extensibility

28.

Burp v1.4 preview - Session handling: putting it all together

blog | 2011-03-25 09:46 | portswigger.net | Original ↗ | .md | #burp-suite | #automation | #session-handling

29.

Fuzzing Parameters in CSRF Resistant Applications with Burp Proxy

blog | 2010-09-24 00:00 | netspi.com | Original ↗ | .md | #pentesting | #fuzzing | #web-security

30.

XSRF and threat ratings

blog | 2008-03-20 19:16 | portswigger.net | Original ↗ | .md | #sql-injection | #web-security | #penetration-testing