I was on my laptop, as I often am when there’s rubbish on telly, and found myself wondering what characters are allowed in a tag. I knew they had to begin with “a-zA-Z”, but what about after that? I t
Source link
Related Articles
All PortSwigger →
Inline Style Exfiltration: leaking data with chained CSS conditionals
I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style…
How to build custom scanners for web security research automation
In this post, I’ll share my approach to developing custom automation to aid research into under-appreciated attack classes and (hopefully) push the boundaries of web…
Zoom Whiteboard patches XSS bug
Table of Contents Escaping sanitization Weaponizing the clipboard The challenges of hybrid applications Check your third-party dependencies Ben Dickson 22 December 2022 at 12:00 UTC…
F5 fixes high severity RCE bug in BIG-IP, BIG-IQ devices
Table of Contents CSRF to RCE Exploit chain Hotfixes, patches Adam Bannister 16 November 2022 at 15:02 UTC Updated: 16 November 2022 at 15:06 UTC…
Zendesk Explore flaws opened the door to account pillage
Table of Contents API hunting ground Old school SQL injection Zen garden John Leyden 15 November 2022 at 16:10 UTC Updated: 16 November 2022 at…
Remote code execution flaw patched in Apache Kafka
Possible RCE and denial-of-service issue discovered in Kafka Connect Apache has resolved a vulnerability potentially exploitable to launch remote code execution (RCE) attacks using Kafka…