Etiqueta: Practitioner

DOM XSS via client-side prototype pollution

Client-side prototype pollution via browser APIs

Arbitrary object injection in PHP

Using application functionality to exploit insecure deserialization

Modifying serialized data types

Host validation bypass via connection state attack

SSRF via flawed request parsing

Routing-based SSRF

Exploiting cache server normalization for web cache deception

Exploiting origin server normalization for web cache deception