Skip to content
September 13, 2026
☍ CyberNoz
  • Home
Home›Mix›CSRF protection on OIDC login is broken
Mix

CSRF protection on OIDC login is broken

Cybernoz
April 8, 2023 1 min read
Share X / Twitter LinkedIn Reddit WhatsApp Email



Nextcloud disclosed a bug submitted by mikaelgundersen: https://hackerone.com/reports/1878381



Source link

Share X / Twitter LinkedIn Reddit WhatsApp Email
« Previous
Top 3 Most Dangerous Lines of Code
Next »
Unveiling the Wild World of Bug Bounties

Related Articles

All Mix →
Optimizing ZAP and Burp with JVM Mix

Optimizing ZAP and Burp with JVM

Table of Contents JVM Options JVM Options in ZAP JVM Options in BurpSuite Optimizing with JVM Memory Garbage Collector AggressiveOpts Deduplication Strings Conclusion 누군가가 저에게…

July 31, 2023 Cybernoz 1 min read
Hackerone logo Mix

New York Releases AI Cybersecurity Guidance: What You Need to Know

Table of Contents Cybersecurity Risks of AI Mitigating AI Cybersecurity Risks: Key Strategies for Financial Institutions The Road Ahead: What's Next for AI and Cybersecurity?…

December 17, 2024 Cybernoz 4 min read
Programming Atrophy Mix

Programming Atrophy

It’s stunning to me how stale one can become when they don’t code for a while. I just put together a quick little something in…

April 23, 2025 Cybernoz 1 min read
Applying Fundamentals to Health and Information Security Mix

Applying Fundamentals to Health and Information Security

Image by pshan427 In both health and information security it’s easy to become conceptually constrained by external advice, recommendations, and standards. The numbers of entities…

April 20, 2025 Cybernoz 2 min read
Burp Suite roadmap for 2022 Blog scaled Mix

Burp Suite roadmap for 2022 | Blog

Matt Atkinson | 13 January 2022 at 15:45 UTC This roadmap has now been updated. Please see our July 2022 roadmap update. With 2022 now…

April 16, 2023 Cybernoz 5 min read
How My Projects Fit Together Mix

How My Projects Fit Together

Table of Contents The Problem(s) Security forever The projects Substrate Fabric TELOS Daemon Human 3.0 How they all fit together Summary When people look at…

August 28, 2025 Cybernoz 4 min read

Latest Posts

  • CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
  • SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114
  • Abusing internal API to achieve IDOR in New Relic — Jon Bottarini
  • Wiz4Wiz: Wiz using Wiz for cloud security
  • Beyond the wail: deconstructing the BANSHEE infostealer
  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
☍ CyberNoz

Cybersecurity News

  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
Archive
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
© 2026 Cybernoz. All rights reserved.