1. James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup vulnerability | 2026-09-15 12:39 | yeswehack.com | original ↗ | #ai-security | #rce | #http-desync
2. Inline Style Exfiltration: leaking data with chained CSS conditionals research | 2025-08-27 07:35 | portswigger.net | original ↗ | #chromium | #exfiltration | #css
3. Blind CSS Exfiltration: exfiltrate unknown web pages research | 2024-07-11 10:09 | portswigger.net | original ↗ | #web-security | #csp-bypass | #exfiltration
4. DOJO Challenge #25 Winners! blog | 2023-07-27 12:26 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss
5. uBlock, I exfiltrate: exploiting ad blockers with CSS research | 2021-12-07 12:15 | portswigger.net | original ↗ | #web-security | #css-injection | #ublock-origin
6. Detecting and exploiting path-relative stylesheet import (PRSSI) vulnerabilities research | 2021-02-10 14:29 | portswigger.net | original ↗ | #phpbb | #css-injection | #browser-quirks
Skip to content