About The Author
-
The CSS Backdoor Nobody Talks About
Webmail clients like Gmail, Outlook, and Fastmail sanitize untrusted HTML/CSS to protect users from attacks. However, security researchers…
-
YesWeHack Dojo – RubitMQ
Initial Ruby Application Code: The application processes user-supplied data by storing it as a job payload and deserializing…
-
XSS 101
What is XSS? Cross-site scripting (XSS) is the most common vulnerability in web applications and allows an attacker…
Recent Posts
- PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution (CVE-2026-109618 and CVE-2026-109619)
PHP2Shell is a set of critical vulnerabilities in the PHP… Read more: PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution (CVE-2026-109618 and CVE-2026-109619) - The CSS Backdoor Nobody Talks About
Webmail clients like Gmail, Outlook, and Fastmail sanitize untrusted HTML/CSS… Read more: The CSS Backdoor Nobody Talks About - Critical Analysis of CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint is one of the most widely used enterprise… Read more: Critical Analysis of CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability - We’re Hiring: Python Cybersecurity Expert
Hiring Status: Closed Applications for this position are no longer… Read more: We’re Hiring: Python Cybersecurity Expert - XSSR Pro is Now Available for Free
We’re excited to announce that XSSR Pro is now available… Read more: XSSR Pro is Now Available for Free
Social Media
Advertisement
Tags
API Bug Bounty Capture The Flag Command Injection Cross-site Scripting CSS CTF CVE-2026-9082 CVE-2026-50522 CVE-2026-109618 CVE-2026-109619 Drupal ExifTool HTML Information Disclosure JavaScript Markdown Microsoft SharePoint Open Redirection PHP php2shell SQL Injection VDP WAF Web Application Firewall XSS XSSR XSSRush