writeups.xyz writeups.xyz / Client-Side Path Traversal

Title Vulnerabilities Programs Authors
Front-End Frameworks: When Bypassing Built-in Sanitization Might Backfire
Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF
Bypassing WAFs to Exploit CSPT Using Encoding Levels
The power of Client-Side Path Traversal: How I found and escalated 2 bugs through “../”
From an Innocent Client-Side Path Traversal to Account Takeover
Client Side Path Manipulation
Leaking Jupyter instance auth token chaining CVE-2023-39968, CVE-2024-22421 and a chromium bug
Practical Example Of Client Side Path Manipulation
Practical Client Side Path Traversal Attacks