Skip to content
August 4, 2026
☍ CyberNoz
  • Home
Home›Mix›CSRF protection on OIDC login is broken
Mix

CSRF protection on OIDC login is broken

Cybernoz
April 8, 2023 1 min read
Share X / Twitter LinkedIn Reddit WhatsApp Email



Nextcloud disclosed a bug submitted by mikaelgundersen: https://hackerone.com/reports/1878381



Source link

Share X / Twitter LinkedIn Reddit WhatsApp Email
« Previous
Top 3 Most Dangerous Lines of Code
Next »
Unveiling the Wild World of Bug Bounties

Related Articles

All Mix →
U.N. Report Predicts Social Unrest Due to Inequality Mix

U.N. Report Predicts Social Unrest Due to Inequality

Evidently I’m not the only one who’s seeing what’s happening. I’ve been writing for years about how we’re approaching a volatile social situation due to…

April 12, 2025 Cybernoz 1 min read

Cyber Security Reporting | Is Public Disclosure the Right Choice?

Table of Contents Public Disclosure on HackerOne Control the Message Disclosure For Your Needs There are over 1,600 publicly disclosed vulnerability reports on the HackerOne…

May 31, 2023 Cybernoz 3 min read
AI's Impact on Software and Bug Bounty · Joseph Thacker Mix

AI’s Impact on Software and Bug Bounty · Joseph Thacker

I have a lot of thoughts on how AI will affect things, including bug bounty. And most of it is speculation, of course, but I…

February 24, 2026 Cybernoz 2 min read
My Paper To-Do Strategy Mix

My Paper To-Do Strategy

Table of Contents One page at a time Intuitive notation When it’s time to turn the page Time well spent doing Subscribe Coding up a…

February 7, 2025 Cybernoz 3 min read

Security: Implementing A Secure And Usable Internet Password Scheme

Being an information security consultant I am often asked how to balance the need for online passwords that are both hard to guess and easy…

July 20, 2025 Cybernoz 6 min read
INTERVIEW WITH @ BASE 64 19 Yo TOP 150 WORLDWIDE scaled Mix

INTERVIEW WITH @_BASE_64 : 19 Y/o | TOP 150 WORLDWIDE on H1 | METHODOLOGY, MINDSET & MORE…

INTERVIEW WITH @_BASE_64 : 19 Y/o | TOP 150 WORLDWIDE on H1 | METHODOLOGY, MINDSET & MORE… Source link

March 19, 2023 Cybernoz 1 min read

Latest Posts

  • Almost Half of Malware Samples Communicate Direct to IP
  • Massive ChainDrop npm supply-chain attack infects hundreds of packages
  • Six Flowise RCE Flaws Let Attackers Execute Code on AI Workflow Servers
  • Fake Bank of America Phishing Emails Found Delivering Disguised ScreenConnect RAT via UAC Bypass
  • Six Flowise Vulnerabilities Enable Remote Code Execution on AI Workflow Servers
  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
☍ CyberNoz

Cybersecurity News

  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
Archive
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
© 2026 Cybernoz. All rights reserved.