Multiple Severe Vulnerabilities in MonkeyType.Com Chat Based XSS, Auth bypass, User Spoofing - Write-ups and Disclosures - @disclose_io Community Forum

I published the original article over at my independent research project obsrva.org Executive Overview In May 2021, independent security researcher Tyler Butler found several critical vulnerabilities in monkeytype.com, a popular open-source typing-test application with a booming community of over 100k daily unique visitors. The vulnerabilities included stored cross-site scripting and user impersonation in the tribe chat room feature, as well as an authentication bypass vulnerability enablin

False positive 953120 · Issue #1635 · SpiderLabs/owasp-modsecurity-crs · GitHub

Text Based Injection, Content Spoofing, Low Impact Common Web Vulnerability, by Rishu Ranjan

Account Takeover Vulnerability in OpenAI ChatGPT

Hacking_SharePoint_FINAL

Solving BugPoc XSS challenge. Heyy Everyoneee,, by Sudhanshu Rajbhar

Hacking_SharePoint_FINAL

A XSS is not detect by ActiveScan - False Negative · Issue #2279 · zaproxy/zaproxy · GitHub

Hacking_SharePoint_FINAL

MX injection and type juggling vulnerabilities · Issue #6229 · roundcube/roundcubemail · GitHub

AWS S3 bucket writeable for authenticated aws users - Bug Bounty POC

Issue #119760

Lab 44 – Web server vulnerability scanning with Zed Attack Proxy

MX injection and type juggling vulnerabilities · Issue #6229 · roundcube/roundcubemail · GitHub