CVE-2020-35774: twitter-server XSS Vulnerability Discovered

According to its official documentation, “twitter-server” is a Twitter OSS project used to provide a template from which servers at Twitter are built. It provides common application components such as an administrative HTTP server, tracing, stats, and more, and is used, amongst other things, by both the Finagle and Finatra frameworks. After researching twitter-server, theRead More ›

New Woody RAT Malware Being Used to Target Russian Organizat - vulnerability database

Found Stored Cross-Site Scripting — What's Next? — Privilege Escalation like a Boss :D, by Harsh Bothra

XSS Vulnerability in IBM Content Navigator (CVE-2020-4757) - GoSecure

Technical Blog Archives - /zh

Technical Blog Archives - /zh

Bug Bytes #105 - Playing with Spring Boot Actuators, recon API sources, JS encryption & A heaps of writeups - Intigriti

An Unfixed Kubernetes Man-in-the-Middle Vulnerability (CVE-2020-8554)

Checkmarx Research: Apache Dubbo 2.7.3 – Unauthenticated RCE via Deserialization of Untrusted Data (CVE-2019-17564) - Security Boulevard

Eugene Rojavski (@EugeneRojavski) / X