Etiqueta: Apprentice

Limit overrun race conditions

Modifying serialized objects

Host header authentication bypass

Basic password reset poisoning

Exploiting path mapping for web cache deception

Exploiting XXE to perform SSRF attacks

Exploiting XXE using external entities to retrieve files

JWT authentication bypass via flawed signature verification

JWT authentication bypass via unverified signature

CORS vulnerability with trusted null origin