Curated security research, vulnerabilities, advisories and tools for practitioners.

#web

Security coverage tagged web.

1.

Wormable Substack XSS

research | 2024-08-12 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #web-security | #xss

2.

[CVE-2024-40626] Type confusion attacks in ProseMirror editors

vulnerability | 2024-07-16 00:00 | CVE-2024-40626 | calif.io | Original ↗ | .md | #supply-chain | #vulnerability-research | #xss

3.

[CVE-2023-41892] CraftCMS RCE

vulnerability | 2023-09-14 00:00 | CVE-2023-41892 | calif.io | Original ↗ | .md | #rce | #vulnerability-research | #php

4.

Reproducing CVE-2023-38646: Metabase Pre-auth RCE

vulnerability | 2023-07-27 00:00 | CVE-2023-38646 | calif.io | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

5.

[CVE-2021-21239] Redash SAML Authentication Bypass

vulnerability | 2023-04-28 00:00 | CVE-2021-21239 | calif.io | Original ↗ | .md | #vulnerability-research | #web-security | #saml