Categoría: writeups

Limit overrun race conditions

DOM XSS via client-side prototype pollution

Client-side prototype pollution via browser APIs

Activar DOM Invader y Prototype pollution

Arbitrary object injection in PHP

Using application functionality to exploit insecure deserialization

Modifying serialized data types

Modifying serialized objects

Host validation bypass via connection state attack

SSRF via flawed request parsing