Curated security research, vulnerabilities, advisories and tools for practitioners.

#web-security

Security coverage tagged web-security. (Page 7)

181.

Top 3 web application security vulnerabilities in 2024

blog | 2023-09-27 00:00 | aikido.dev | original ↗ | #remediation | #web-security | #sast

182.

Smashing the state machine: the true potential of web race conditions

research | 2023-09-18 14:17 | portswigger.net | original ↗ | #web-security | #research | #race-conditions

183.

Securing the Insecure Objects

research | 2023-08-23 01:00 | labs.cognisys.group | original ↗ | #pentesting | #access-control | #web-security

184.

PimpMyBurp #9 – Use BCheck to improve vulnerability scanning

vulnerability | 2023-08-01 13:18 | yeswehack.com | original ↗ | #bug-bounty | #burp-suite | #web-security

185.

An Interesting XSS-Bypassing WAF

vulnerability | 2023-07-26 10:04 | labs.cognisys.group | original ↗ | #pentesting | #web-security | #xss

186.

DOJO Challenge #25 Winners!

blog | 2023-07-27 12:26 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

187.

Introducing jsluice: A Technical Deep-Dive for JavaScript Gold (Part 2)

blog | 2023-07-20 00:00 | bishopfox.com | original ↗ | #open-source | #web-security | #security-tools

188.

Exploiting XSS in hidden inputs and meta tags

research | 2023-07-11 13:00 | portswigger.net | original ↗ | #web-security | #xss | #chrome

189.

What is OWASP Top 10?

blog | 2023-07-12 00:00 | aikido.dev | original ↗ | #web-security | #risk-management | #owasp

190.

How to build a secure admin panel for your SaaS app

blog | 2023-07-11 00:00 | aikido.dev | original ↗ | #access-control | #web-security | #best-practices

191.

Web Application Black-Box Testing

blog | 2023-07-06 14:07 | yeswehack.com | original ↗ | #bug-bounty | #pentesting | #fuzzing

192.

DOJO CHALLENGE #20 Winners!

vulnerability | 2023-06-06 13:37 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #dojo

193.

Bypassing CSP via DOM clobbering

research | 2023-06-05 14:00 | portswigger.net | original ↗ | #burp-suite | #web-security | #xss

194.

DOJO Challenge #23 Winners!

vulnerability | 2023-05-15 12:59 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

195.

PimpMyBurp #8 – Perform Advanced Fuzzing With Turbo Intruder

blog | 2023-05-03 14:13 | yeswehack.com | original ↗ | #bug-bounty | #pentesting | #burp-suite

196.

Ambushed by AngularJS: a hidden CSP bypass in Piwik PRO

research | 2023-04-28 12:31 | portswigger.net | original ↗ | #web-security | #dom-xss | #csp-bypass

197.

DOJO Challenge #22 Winners!

vulnerability | 2023-04-07 08:52 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #dojo

198.

The curl quirk that exposed Burp Suite & Google Chrome

research | 2023-03-28 13:13 | portswigger.net | original ↗ | #burp-suite | #vulnerability-research | #web-security

199.

Server-side prototype pollution: Black-box detection without the DoS

research | 2023-03-28 09:50 | portswigger.net | original ↗ | #web-security | #prototype-pollution | #detection

200.

Exploiting prototype pollution in Node without the filesystem

research | 2023-03-23 15:00 | portswigger.net | original ↗ | #rce | #web-security | #prototype-pollution

201.

How to Hack: A Step-by-Step Journey brought to you by Bugcrowd and Katie Paxton-Fear

blog | 2023-03-15 00:39 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #training

202.

Server side prototype pollution, how to detect and exploit

vulnerability | 2023-02-15 16:19 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-research | #web-security

203.

DOJO CHALLENGE #21 Winners!

vulnerability | 2023-02-14 14:20 | yeswehack.com | original ↗ | #bug-bounty | #access-control | #sql-injection

204.

Top 10 Web Hacking Techniques of 2017 - Nominations Open

research | 2023-02-09 16:03 | portswigger.net | original ↗ | #web-security | #community | #history

205.

Firefly: a smart black-box fuzzer for web applications testing

blog | 2023-02-10 16:29 | yeswehack.com | original ↗ | #bug-bounty | #fuzzing | #web-security

206.

PimpMyBurp #7: How HaE Burp Suite extension can help you in your daily hunting session

vulnerability | 2023-01-18 16:48 | yeswehack.com | original ↗ | #bug-bounty | #pentesting | #burp-suite

207.

FlowscreenComponents Basepack, Version 3.0.7 Advisory

vulnerability | 2022-12-15 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #vulnerability

208.

Exploring JavaScript's exploits: A deep dive into XSS vulnerabilities

research | 2022-12-08 08:25 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

209.

Hijacking service workers via DOM Clobbering

research | 2022-12-05 08:50 | portswigger.net | original ↗ | #web-security | #xss | #client-side-security

210.

Log HTTP Requests, Version 1.3.1, Advisory

vulnerability | 2022-11-21 00:00 | CVE-2022-3402 | bishopfox.com | original ↗ | #web-security | #wordpress | #xss

← Previous More →