← Research
web
5 write-ups tagged web.
Wormable Substack XSS
August 12, 2024
A cross-site scripting bug on Substack that could have spread on its own.
Type confusion attacks in ProseMirror editors
July 16, 2024
A rich-text editor that trusts its own JSON turns a document into script execution.
CraftCMS RCE
September 14, 2023
Chaining a file write into remote code execution on CraftCMS.
Reproducing CVE-2023-38646: Metabase Pre-auth RCE
July 27, 2023
Walking a pre-auth remote code execution bug back from the patch.
Redash SAML Authentication Bypass
April 28, 2023
Signing in as any user on a self-hosted Redash, with no password.