evil blog · Scour

DoubleClickjacking: A New Era of UI Redressing

evil.blog·72w·evil.blog

Cross Window Forgery: A New Class of Web Attack

evil.blog·119w·evil.blog

This man thought opening a TXT file is fine, he thought wrong. macOS CVE-2019-8761

evil.blog·267w·evil.blog

Pre-auth RCE via XXE & SSRF on NetGear Stora, SeaGate Home, and Medion LifeCloud NAS

evil.blog·393w·evil.blog

THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS

evil.blog·415w·evil.blog

SaferVPN CVE-2018-10308, from DoS to deanonymization

evil.blog·421w·evil.blog

Hotspot Shield CVE-2018-6460, Sensitive Information Disclosure with XSSI

evil.blog·432w·evil.blog

Exploiting odd behaviors in MS Edge & IE to bypass Facebook’s Linkshim

evil.blog·469w·evil.blog

Why CSP Should be carefully crafted: Twitter XSS & CSP Bypass

evil.blog·472w·evil.blog

Instagram Stored OAuth XSS

evil.blog·494w·evil.blog

eFront LMS - RCE (All versions)

evil.blog·499w·evil.blog

Facebook's Moves - OAuth redirect_uri bypass

evil.blog·517w·evil.blog

Exploit-DB Local File Inclusion (Possible RCE/RFI)

evil.blog·572w·evil.blog

Exploiting PHP Upload forms with CVE-2015-2348

evil.blog·581w·evil.blog

Facebook: Another Linkshim Bypass

evil.blog·585w·evil.blog

Facebook’s Oculus – Cross-Site Content Hijacking (XSCH) to Bypass SOP

evil.blog·589w·evil.blog

Morfy CMS Multiple Vulnerabilities

evil.blog·596w·evil.blog

XSS Bug on Facebook Studio

evil.blog·597w·evil.blog

(Monstra <= 3.0.1 & Anchor <= 0.9) CVE-2014-9006, CVE-2014-9182

evil.blog·600w·evil.blog

ZTE ZXDSL 831C|| Multiple Vulnerabilities

evil.blog·601w·evil.blog

Log in to enable infinite scrolling