🌐 Web Exploits - buckman · Scour

The Juice Shop Chronicles | Part 1: Authentication Bypass via SQL Injection 🔓Hacking

HTB: Sorcery 🌐DNS Security

0xdf.gitlab.io·1d

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 2 🔄DevSecOps

github.com·15h·DEV

Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks 🌍Browser Exploits

bleepingcomputer.com·2d

URL-Based XSS ⚠️XSS

·4d

CISA Adds Four Known Exploited Vulnerabilities to Catalog 🔓Vulnerability Research

VU#890999: Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser 🌍Browser Exploits

kb.cert.org·5d

Spring — Spring Boot Actuator RCE + Symlink Arbitrary Write to Root 🚧Execution Guardrails

infosecwriteups.com

·2d

We Built the First DAST Scanner for AI Agents. Every Server we Tested Failed. 🎯AI Reliability

target-server.com·2d·DEV

OWASP ZAP の finding を Rust/Axum の handler に戻して直す 🚩CTF Writeups

syu-m-5151.hatenablog.com·3d

How I Found and Reported My First XSS Vulnerability 🌍Browser Exploits

·4d

HOW I SOLVED SQL INJECTION (LAB 9 PORTSWIGGER ACADEMY) 🕳LLM Vulnerabilities

·3d

SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files 🛡️Parser Security

thehackernews.com·6d

PortSwigger XSS Lab Walkthrough: When Input Sanitization Fails 🛡️Parser Security

·4d

DVRTC v0.2.0: pbx2 and SIP SQL injection 🌐DNS Security

enablesecurity.com·6d

Day 9: CSRF Where the Token Is Duplicated in the Cookie 🍪Session Management

smartpicks4u.medium.com·4d

Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet 🎫Kerberos Exploitation

infosecurity-magazine.com·6d

Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster 🪟ETW Patching

securityweek.com·5d

Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking 💥Binary Exploitation

·5d

Mirai Botnet Targets Flaw in Discontinued D-Link Routers 🪟ETW Patching

securityweek.com·4d

Log in to enable infinite scrolling