Curated security research, vulnerabilities, advisories and tools for practitioners.

#url-parsing

Security coverage tagged url-parsing.

1.

Gotta cache 'em all: bending the rules of web cache exploitation

research | 2026-01-08 12:21 | portswigger.net | original ↗ | #vulnerability-research | #web-security | #research

2.

CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint

vulnerability | Medium | 2025-09-23 14:42 | CVE-2025-27888 | xbow.com | original ↗ | #zero-day | #vulnerability-research | #ssrf

3.

Side Effects: When Continuous Development Introduces Security Threats

research | 2024-11-04 09:00 | theori.io | original ↗ | #browser-security | #xss | #http2

4.

Concealing payloads in URL credentials

research | 2024-10-23 14:03 | portswigger.net | original ↗ | #firefox | #web-security | #dom-xss

5.

Safari is hot-linking images to semi-random websites

research | 2024-05-03 08:12 | portswigger.net | original ↗ | #browser-security | #url-parsing | #safari

6.

Escaping well-configured VSCode extensions (for profit)

blog | 2023-02-23 13:00 | CVE-2022-41042 | blog.trailofbits.com | original ↗ | #arbitrary-file-read | #vulnerability-research | #path-traversal