Curated security research, vulnerabilities, advisories and tools for practitioners.

#xss

Security coverage tagged xss. (Page 5)

121.

SVG animate XSS vector

research | 2020-09-08 12:22 | portswigger.net | original ↗ | #browser-security | #web-security | #xss

122.

JavaScript without parentheses using DOMMatrix

research | 2020-09-08 10:00 | portswigger.net | original ↗ | #xss | #portswigger | #javascript

123.

One XSS cheatsheet to rule them all

research | 2020-09-04 14:33 | portswigger.net | original ↗ | #browser-security | #xss | #portswigger

124.

TinyMCE, Version 5.2.1 Advisory

vulnerability | 2020-08-12 00:00 | CVE-2020-12648 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

125.

DOM Clobbering strikes back

research | 2020-07-07 10:31 | portswigger.net | original ↗ | #browser-security | #xss | #research

126.

Executing non-alphanumeric JavaScript without parenthesis

research | 2020-07-02 12:05 | portswigger.net | original ↗ | #xss | #obfuscation | #javascript

127.

SecureAuth Version 9.3

vulnerability | 2020-06-19 00:00 | CVE-2020-9437 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

128.

DigDash Enterprise: Versions 2018R2-2020R1

vulnerability | 2020-06-15 00:00 | CVE-2020-13650 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

129.

Documenting the impossible: Unexploitable XSS labs

research | 2020-06-04 09:31 | portswigger.net | original ↗ | #web-security | #xss | #payloads

130.

XSS without parentheses and semi-colons

research | 2020-03-20 07:50 | portswigger.net | original ↗ | #xss | #portswigger | #javascript

131.

What Is XSS?: An Overview

vulnerability | 2020-03-16 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #owasp

132.

How to Prevent the OWASP Top 10

vulnerability | 2020-02-10 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #owasp

133.

Bugcrowd + PentesterLab — Learn Web Hacking Easier!

blog | 2020-02-11 00:00 | bugcrowd.com | original ↗ | #web-security | #xss | #training

134.

Big Monitoring Fabric Application

blog | 2019-12-30 00:00 | bishopfox.com | original ↗ | #privilege-escalation | #xss | #network-security

135.

This Season, Give the Gift of Data-Driven Insight

vulnerability | 2019-12-13 23:30 | hackerone.com | original ↗ | #bug-bounty | #xss | #data-analysis

136.

OpenEMR 5.0.1(6) - RCE and XSS

vulnerability | 2019-09-10 00:00 | CVE-2019-8371 | bishopfox.com | original ↗ | #rce | #xss | #advisory

137.

Hacker-Powered Data - Security Weaknesses and Embracing Risk with HackerOne

blog | 2019-08-26 10:00 | hackerone.com | original ↗ | #bug-bounty | #xss | #owasp

138.

A Need for Vigilance in Open Source Software: Dolibarr CRM Advisory Release

blog | 2019-07-31 00:00 | bishopfox.com | original ↗ | #rce | #xss | #responsible-disclosure

139.

InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities

advisory | 2019-07-24 00:00 | CVE-2018-17150 | bishopfox.com | original ↗ | #xss | #xxe | #authorization

140.

Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program

blog | 2019-07-14 00:00 | samcurry.net | original ↗ | #bug-bounty | #xss | #blind-xss

141.

YesWeHack & Alibaba Security Meetup challenge solution

blog | 2019-06-25 14:08 | yeswehack.com | original ↗ | #browser-security | #ctf | #web-security

142.

Bypassing CSP using polyglot JPEGs

research | 2019-06-14 12:15 | portswigger.net | original ↗ | #burp-suite | #web-security | #xss

143.

Abusing JavaScript frameworks to bypass XSS mitigations

research | 2019-06-14 12:14 | portswigger.net | original ↗ | #xss | #portswigger | #bypass

144.

Adapting AngularJS payloads to exploit real world applications

research | 2019-06-14 12:12 | portswigger.net | original ↗ | #xss | #template-injection | #payloads

145.

XSS in hidden input fields

research | 2019-06-14 12:03 | portswigger.net | original ↗ | #firefox | #web-security | #xss

146.

Catch the flag, catch the (real!) gold

blog | 2019-06-11 08:57 | yeswehack.com | original ↗ | #bug-bounty | #ctf | #xss

147.

Provoking browser quirks with behavioural fuzzing

research | 2019-05-29 12:16 | portswigger.net | original ↗ | #firefox | #fuzzing | #xss

148.

[Guest Post] SoundCloud Takes its Bug Bounty Program Public

vulnerability | 2019-04-18 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #xss | #bugcrowd

149.

Solution for “A Weird XSS Case”

vulnerability | 2019-04-01 13:47 | yeswehack.com | original ↗ | #ctf | #web-security | #xss

150.

Introducing the Web Security Academy

blog | 2019-04-02 13:00 | portswigger.net | original ↗ | #sql-injection | #xss | #training

← Previous More →