1.James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundupblog | 2026-09-15 12:39 | yeswehack.com | Original ↗ | .md | #ai-security | #rce | #http-desync
2.Inline Style Exfiltration: leaking data with chained CSS conditionalsresearch | 2025-08-27 07:35 | portswigger.net | Original ↗ | .md | #chromium | #exfiltration | #css
3.Blind CSS Exfiltration: exfiltrate unknown web pagesresearch | 2024-07-11 10:09 | portswigger.net | Original ↗ | .md | #web-security | #csp-bypass | #exfiltration
4.DOJO Challenge #25 Winners!blog | 2023-07-27 12:26 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #xss
5.uBlock, I exfiltrate: exploiting ad blockers with CSSresearch | 2021-12-07 12:15 | portswigger.net | Original ↗ | .md | #web-security | #css-injection | #ublock-origin
6.Detecting and exploiting path-relative stylesheet import (PRSSI) vulnerabilitiesresearch | 2021-02-10 14:29 | portswigger.net | Original ↗ | .md | #phpbb | #css-injection | #browser-quirks