Multi-sandwich attack with MongoDB Object ID or the scenario for real-time monitoring of web application invitations: a new use case for the sandwich attack |
|
|
|
Unsecure time-based secret and Sandwich Attack - Analysis of my research and release of the “Reset Tolkien” tool |
|
|
|
Privileged account creation via Mass Assignment towards a full compromise using a Stored XSS |
|
|
|
Stored XSS in the administrator’s panel due to misuse of MarkupSafe |
|
|
|