1Drag and Pwnd: Exploiting VS Code with ASCII (opens in new tab)(portswigger.net)1albinowax_10mo ago0
2Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information (opens in new tab)(embracethered.com)4albinowax_1y ago0
3Chaining Three Bugs to Access All Your ServiceNow Data (opens in new tab)(assetnote.io)2albinowax_1y ago0
5Hacking millions of modems and investigating who hacked my modem (opens in new tab)(samcurry.net)838albinowax_1y ago271
6Getting XXE in Web Browsers Using ChatGPT (opens in new tab)(swarm.ptsecurity.com)1albinowax_1y ago0
7Response Filter Denial of Service: shut down a website by triggering WAF rule (opens in new tab)(blog.sicuranext.com)95albinowax_1y ago26
8Source Code Disclosure in Asp.net via Cookieless Sessions (opens in new tab)(swarm.ptsecurity.com)1albinowax_2y ago0
9ChatGPT Account Takeover via Wildcard Web Cache Deception (opens in new tab)(nokline.github.io)4albinowax_2y ago0
10Detection and Exploitation of Ivanti's Pulse Connect Secure RCE (opens in new tab)(assetnote.io)1albinowax_2y ago0
11The curl quirk that exposed Burp Suite and Google Chrome (opens in new tab)(portswigger.net)1albinowax_2y ago1