Curated security research, vulnerabilities, advisories and tools for practitioners.

#xss

Security coverage tagged xss. (Page 4)

91.

Bypassing Firefox's HTML Sanitizer API

research | 2022-07-04 07:46 | portswigger.net | original ↗ | #browser-security | #firefox | #xss

92.

FileStack Upload Advisory

vulnerability | 2022-06-23 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #cross-site-scripting

93.

Finding client-side prototype pollution with DOM Invader

blog | 2022-06-20 12:37 | portswigger.net | original ↗ | #burp-suite | #xss | #client-side-security

94.

How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours

vulnerability | 2022-06-16 11:00 | hackerone.com | original ↗ | #bug-bounty | #attack-surface | #xss

95.

How to Catch Injection Security Vulnerabilities in Code Review

blog | 2022-06-09 16:00 | hackerone.com | original ↗ | #code-review | #sql-injection | #xss

96.

Novel Attack Vector to Bypass CSP Via Same Origin Method Execution (Wordpress Zeroday)

blog | 2022-05-29 11:00 | pwn.ai | original ↗ | #vulnerability-research | #wordpress | #xss

97.

New XSS vectors

research | 2022-04-20 14:07 | portswigger.net | original ↗ | #xss | #cheat-sheet | #vectors

98.

Fuzzing for XSS via nested parsers condition

research | 2021-12-29 13:58 | swarm.ptsecurity.com | original ↗ | #fuzzing | #web-security | #xss

99.

Hunting nonce-based CSP bypasses with dynamic analysis

research | 2021-09-17 14:00 | portswigger.net | original ↗ | #xss | #burp-scanner | #dynamic-analysis

100.

Introduction to postMessage() Vulnerabilities

blog | 2021-08-25 14:52 | yeswehack.com | original ↗ | #bug-bounty | #browser-security | #web-security

101.

blog | 2021-08-13 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #idor

102.

Evading CSP with DOM-based dangling markup

research | 2021-07-19 07:19 | portswigger.net | original ↗ | #browser-security | #xss | #portswigger

103.

alert() is dead, long live print()

research | 2021-07-05 10:03 | portswigger.net | original ↗ | #xss | #poc | #chrome

104.

Introducing DOM Invader: DOM XSS just got a whole lot easier to find

blog | 2021-06-30 16:47 | portswigger.net | original ↗ | #burp-suite | #xss | #portswigger

105.

LEXSS: Bypassing Lexical Parsing Security Controls

vulnerability | 2021-06-22 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #vulnerability

106.

Blind XSS : setup your self-hosted XSS Hunter with the PwnMachine

vulnerability | 2021-06-18 15:13 | yeswehack.com | original ↗ | #bug-bounty | #xss | #tooling

107.

Froala Editor, Version 3.2.6 Advisory

vulnerability | 2021-06-02 00:00 | CVE-2021-28114 | bishopfox.com | original ↗ | #web-security | #xss | #vulnerability

108.

The Ultimate Guide to Finding and Escalating XSS Bugs

vulnerability | 2021-03-25 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #xss

109.

DOJO CHALLENGE #7 Winners!

vulnerability | 2021-03-12 10:44 | yeswehack.com | original ↗ | #ctf | #xss | #prototype-pollution

110.

Hacker Spotlight: Interview with hazimaslam

vulnerability | 2021-02-05 15:00 | hackerone.com | original ↗ | #bug-bounty | #xss | #pakistan

111.

Google Partner Program – GPP Top 10

blog | 2021-01-26 00:00 | bishopfox.com | original ↗ | #appsec | #access-control | #xss

112.

Mautic Version <=3.2.2 Advisory

vulnerability | 2021-01-15 00:00 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

113.

Web Security Academy - your questions answered

blog | 2020-12-03 15:31 | portswigger.net | original ↗ | #sql-injection | #xss | #labs

114.

The latest PortSwigger research is coming to Black Hat Europe 2020

blog | 2020-12-02 15:44 | portswigger.net | original ↗ | #conference | #xss | #research

115.

DOJO CHALLENGE #3 Winners!

vulnerability | 2020-11-25 13:22 | yeswehack.com | original ↗ | #ctf | #xss | #training

116.

Security Advisory: Immuta Version 2.8.2

advisory | 2020-11-04 00:00 | bishopfox.com | original ↗ | #xss | #advisory | #session-management

117.

These Are the Bugs You Should Look for in Late 2020

blog | 2020-10-08 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #sql-injection | #xss

118.

DOJO CHALLENGE #5 Winners!

vulnerability | 2020-09-12 12:04 | yeswehack.com | original ↗ | #ctf | #xss | #dojo

119.

When alert fails: exploiting transient events

research | 2020-09-08 12:27 | portswigger.net | original ↗ | #web-security | #xss | #waf-bypass

120.

Bypassing AngularJS bind HTML

research | 2020-09-08 12:23 | portswigger.net | original ↗ | #xss | #portswigger | #cors

← Previous More →