Race Condition, OAuth without state and redirection into XSS & RCE via HTML2PDF - PhantomFeed HTB University 2023
Categories
9 pages
web
XSS, Race Condition, XS-Leaks and CSP & iframe's sandbox bypass - LakeCTF 2023 GeoGuessy
Nginx configuration bypass & Forging HTTP request - FCSC2023 Follow The Rabbit
Abusing FindFirstFile to do PHP Session Hijacking - THCon23 Demo App
Server-Side Prototype Pollution on a WebSocket server - BreizhCTF Ariane Chat
