Skip to content
October 5, 2026
☍ CyberNoz
  • Home
Home›Mix›CSRF protection on OIDC login is broken
Mix

CSRF protection on OIDC login is broken

Cybernoz
April 8, 2023 1 min read
Share X / Twitter LinkedIn Reddit WhatsApp Email



Nextcloud disclosed a bug submitted by mikaelgundersen: https://hackerone.com/reports/1878381



Source link

Share X / Twitter LinkedIn Reddit WhatsApp Email
« Previous
Top 3 Most Dangerous Lines of Code
Next »
Unveiling the Wild World of Bug Bounties

Related Articles

All Mix →
Slack Increases Bounty Minimums For the Next 90 Days Mix

HackerOne Joins Forces with Node.js Foundation to Build a Safer Internet

Open source powers our platform, our community, and is the underpinning of our entire connected society. Node.js developers build the web applications that are responsible…

May 25, 2023 Cybernoz 2 min read
Judge AI by Outputs, not Mechanism Mix

Judge AI by Outputs, not Mechanism

This song captures extraordinarily well why arguments about AI understanding are completely misguided and empty. This is a blues version of “Without Me” by Eminem…

November 22, 2025 Cybernoz 2 min read
The researcher’s desk: CVE-2025-20362 - Blog Detectify Mix

The researcher’s desk: CVE-2025-20362 – Blog Detectify

Table of Contents The case file What’s the root cause of CVE-2025-20362?  What’s the mechanism behind CVE-2025-20362?  Defensive takeaways Welcome to The Researcher’s Desk –…

October 31, 2025 Cybernoz 2 min read
Mix

Intigriti Bug Bytes #233 – February 2026

Table of Contents Blogs & videos Exploiting information disclosure vulnerabilities Tools Resources 2026 Kickoff Event: Intigriti turns 10 Statement on AI & researcher IP Welcome…

February 20, 2026 Cybernoz 7 min read
How to do twice as much with half the keystrokes Mix

How to do twice as much with half the keystrokes using `.bashrc`

Table of Contents Bash function for downloading extended Hugo Bash function for downloading a specific Go version Bash function for adding a GitLab remote For…

April 20, 2023 Cybernoz 6 min read
Adoption of CVSS v4.0 Vulnerability Assessment Calculator Mix

Adoption of CVSS v4.0 Vulnerability Assessment Calculator

CVSS stands for ‘Common Vulnerability Scoring System’. The CVSS framework is an open cyber security framework owned by a US-based non-profit organization ‘Forum of Incident…

April 3, 2025 Cybernoz 5 min read

Latest Posts

  • Google Pauses OSS VRP Vulnerability Search Over AI Reports
  • Alleged ShinyHunters Leader Arrested in Jordan
  • Iranian hacker accused of draining 31TB from university inboxes extradited to the US
  • McCrary Institute outlines three priorities for defending critical infrastructure against AI-enabled cyberattacks
  • NIST outlines secure remote access strategies to strengthen water and wastewater OT cybersecurity
  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
☍ CyberNoz

Cybersecurity News

  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
Archive
  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
© 2026 Cybernoz. All rights reserved.