CVE-2020-35774: twitter-server XSS Vulnerability Discovered

According to its official documentation, “twitter-server” is a Twitter OSS project used to provide a template from which servers at Twitter are built. It provides common application components such as an administrative HTTP server, tracing, stats, and more, and is used, amongst other things, by both the Finagle and Finatra frameworks. After researching twitter-server, theRead More ›

CVE-2021–24563 Unauthenticated Stored XSS [Frontend Uploader <= 1.3.2], by Veshraj Ghimire, PenTester Nepal

CVE-2020-17144 : Microsoft Exchange Server EWS Insecure Deserialization

nuclei-templates/templates-checksum.txt at main · projectdiscovery/nuclei-templates · GitHub

New Woody RAT Malware Being Used to Target Russian Organizat - vulnerability database

Technical Blog Archives - /zh

CVE-2021–24563 Unauthenticated Stored XSS [Frontend Uploader <= 1.3.2], by Veshraj Ghimire, PenTester Nepal

Bug Bytes #105 - Playing with Spring Boot Actuators, recon API sources, JS encryption & A heaps of writeups - Intigriti

CVE-2020-1472: Advanced Persistent Threat Actors Use Zerologon Vulnerability In Exploit Chain with Unpatched Vulnerabilities - Blog

Microsoft Releases Workarounds for Office Vulnerability Unde - vulnerability database

Drupal Core: Behind the Vulnerability - Security Boulevard

Technical Blog Archives - /zh

Bug Bytes #105 - Playing with Spring Boot Actuators, recon API sources, JS encryption & A heaps of writeups - Intigriti

Eugene Rojavski (@EugeneRojavski) / X