Curated security research, vulnerabilities, advisories and tools for practitioners.

#html-injection

Security coverage tagged html-injection.

1.

Escaping misconfigured VSCode extensions

vulnerability | 2023-02-21 13:00 | CVE-2022-41042 | blog.trailofbits.com | original ↗ | #vulnerability-research | #xss | #path-traversal

2.

Stealing passwords from infosec Mastodon - without bypassing CSP

research | 2022-11-16 11:49 | portswigger.net | original ↗ | #credential-theft | #web-security | #xss