⤷ Title: Laravel Source Code Review: How XSS Lead to Privilege Escalation and Eventually RCE
════════════════════════
𐀪 Author: Mostafa Yasser
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 23:10:18 GMT
════════════════════════
⌗ Tags: #source_code_review #rce #web_security #chaining_vulnerabilities #privilege_escalation
════════════════════════
𐀪 Author: Mostafa Yasser
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 23:10:18 GMT
════════════════════════
⌗ Tags: #source_code_review #rce #web_security #chaining_vulnerabilities #privilege_escalation
Medium
Laravel Source Code Review: How XSS Lead to Privilege Escalation and Eventually RCE
…
⤷ Title: Command Injection: Complete Guide to Exploitation and Secure Coding Using a Vulnerable Lab…
════════════════════════
𐀪 Author: Mohana Reddy
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 10:14:39 GMT
════════════════════════
⌗ Tags: #rce #dvwa #command_injection #web_security
════════════════════════
𐀪 Author: Mohana Reddy
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 10:14:39 GMT
════════════════════════
⌗ Tags: #rce #dvwa #command_injection #web_security
Medium
💥 Command Injection: Complete Guide to Exploitation and Secure Coding Using a Vulnerable Lab…
What is Command Injection:
⤷ Title: Langflow RCE Bug Hits AI Devs — Here’s How to Lock It Down
════════════════════════
𐀪 Author: Mr.PlanB
════════════════════════
ⴵ Time: Tue, 24 Jun 2025 09:09:47 GMT
════════════════════════
⌗ Tags: #langflow #rce_vulnerability #rce
════════════════════════
𐀪 Author: Mr.PlanB
════════════════════════
ⴵ Time: Tue, 24 Jun 2025 09:09:47 GMT
════════════════════════
⌗ Tags: #langflow #rce_vulnerability #rce
Medium
Langflow RCE Bug Hits AI Devs — Here’s How to Lock It Down
If you’re knee-deep in building AI apps using Langflow, there’s a nasty security mess you need to know about. A recent vulnerability…
⤷ Title: Flagyard CTF — TechShop: Exploiting SSTI to Gain RCE and Read the Flag
════════════════════════
𐀪 Author: Rwx
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 23:35:48 GMT
════════════════════════
⌗ Tags: #rce #cybersecurity #jinja2 #ctf_writeup #ssti
════════════════════════
𐀪 Author: Rwx
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 23:35:48 GMT
════════════════════════
⌗ Tags: #rce #cybersecurity #jinja2 #ctf_writeup #ssti
Medium
Flagyard CTF — TechShop: Exploiting SSTI to Gain RCE and Read the Flag
Step 1: Discovering the Hidden Admin Endpoint
⤷ Title: Frontend Security Best Practices: Protecting Your Users and Your App
════════════════════════
𐀪 Author: Rahul Dinkar
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 04:05:22 GMT
════════════════════════
⌗ Tags: #frontend_development #csp #csrf_protection #web_security #xss_vulnerability
════════════════════════
𐀪 Author: Rahul Dinkar
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 04:05:22 GMT
════════════════════════
⌗ Tags: #frontend_development #csp #csrf_protection #web_security #xss_vulnerability
Medium
Frontend Security Best Practices: Protecting Your Users and Your App
Not a member? (Read for free here)
⤷ Title: XSS at U.S. Department of Education
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 04:29:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #xss_attack #xss_vulnerability #pentesting #bug_bounty_writeup
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 04:29:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #xss_attack #xss_vulnerability #pentesting #bug_bounty_writeup
Medium
XSS at U.S. Department of Education
Program silently fixed the vulnerability
⤷ Title: Cross-Site Scripting (XSS)
════════════════════════
𐀪 Author: ester
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 15:53:04 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #cross_site_scripting #dvwa
════════════════════════
𐀪 Author: ester
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 15:53:04 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #cross_site_scripting #dvwa
Medium
Cross-Site Scripting (XSS)
Apa itu XSS?
⤷ Title: AI Powered XSS Tool Development
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 06:13:27 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #large_language_models #code_review #xss_vulnerability #ethical_hacking
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 06:13:27 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #large_language_models #code_review #xss_vulnerability #ethical_hacking
Medium
AI Powered XSS Tool Development
Creating apps & tools in few minutes
⤷ Title: Injection Can Be Anywhere
════════════════════════
𐀪 Author: Faxcel
════════════════════════
ⴵ Time: Sun, 22 Jun 2025 12:49:25 GMT
════════════════════════
⌗ Tags: #code_injection #bug_bounty #xss_vulnerability #cybersecurity #ssti
════════════════════════
𐀪 Author: Faxcel
════════════════════════
ⴵ Time: Sun, 22 Jun 2025 12:49:25 GMT
════════════════════════
⌗ Tags: #code_injection #bug_bounty #xss_vulnerability #cybersecurity #ssti
Medium
Injection Can Be Anywhere
A write-up covering XSS, HTML Injection, and SSTI in real-world web applications
⤷ Title: Cross-Site Scripting (XSS)
════════════════════════
𐀪 Author: Kuro
════════════════════════
ⴵ Time: Sat, 21 Jun 2025 05:39:37 GMT
════════════════════════
⌗ Tags: #networking #xss_vulnerability
════════════════════════
𐀪 Author: Kuro
════════════════════════
ⴵ Time: Sat, 21 Jun 2025 05:39:37 GMT
════════════════════════
⌗ Tags: #networking #xss_vulnerability
Medium
Cross-Site Scripting (XSS)
Pengertian
⤷ Title: Automating XSS using Dalfox, GF and Waybackurls
════════════════════════
𐀪 Author: イズミー
════════════════════════
ⴵ Time: Sat, 21 Jun 2025 01:29:46 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_vulnerability #dalfox #vulnerability
════════════════════════
𐀪 Author: イズミー
════════════════════════
ⴵ Time: Sat, 21 Jun 2025 01:29:46 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_vulnerability #dalfox #vulnerability
Medium
Automating XSS using Dalfox, GF and Waybackurls
Hey everyone! Hope you’re all doing awesome.😄
⤷ Title: ️ From Payload to Pwn: How I Discovered SQL Injection in a BigQuery API and Exfiltrated Metadata
════════════════════════
𐀪 Author: rohan badekan
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 09:22:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #sql_injection #cloud_security #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: rohan badekan
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 09:22:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #sql_injection #cloud_security #bug_bounty #cybersecurity
Medium
🛠️ From Payload to Pwn: How I Discovered SQL Injection in a BigQuery API and Exfiltrated Metadata
A deep-dive bug bounty write-up on discovering SQL injection in a BigQuery API. Learn how a single input field led to GCP project ID leaks, dataset enumeration, and internal service account exposure — with full payloads and step-by-step exploitation.
⤷ Title: Secure Coding für Web-Entwickler
════════════════════════
𐀪 Author: mertes.dev
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 08:03:22 GMT
════════════════════════
⌗ Tags: #development #xss_attack #web_development #secure_coding #sql_injection
════════════════════════
𐀪 Author: mertes.dev
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 08:03:22 GMT
════════════════════════
⌗ Tags: #development #xss_attack #web_development #secure_coding #sql_injection
Medium
Secure Coding für Web-Entwickler
In der heutigen digitalen Welt sind Webanwendungen allgegenwärtig und übernehmen eine zentrale Rolle in Geschäftsprozessen, der Speicherung…
⤷ Title: HTB: Validation (Askia DeLarge)
════════════════════════
𐀪 Author: Askia DeLarge
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 18:37:38 GMT
════════════════════════
⌗ Tags: #htb #ctf #sql_injection #web_exploitation #cybersecurity
════════════════════════
𐀪 Author: Askia DeLarge
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 18:37:38 GMT
════════════════════════
⌗ Tags: #htb #ctf #sql_injection #web_exploitation #cybersecurity
Medium
HTB: Validation (Askia DeLarge)
Author: Askia DeLarge OS: Linux Difficulty: Easy
⤷ Title: How to Detect SQL Injection — step by step instruction
════════════════════════
𐀪 Author: Demianchuk Sergii
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 14:20:32 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity
════════════════════════
𐀪 Author: Demianchuk Sergii
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 14:20:32 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity
Medium
How to Detect SQL Injection — step by step instruction
Hi, below you may find a short instructions how to detect SQL injections at your application.
⤷ Title: Master SQL Injection: Exploit Hyperpure’s $2000 Bounty Vulnerability
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 22:41:54 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #sql_injection #technology #bug_bounty #report
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 22:41:54 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #sql_injection #technology #bug_bounty #report
Medium
Master SQL Injection: Exploit Hyperpure’s $2000 Bounty Vulnerability
Discover How to Find and Fix This Dangerous Web Flaw
⤷ Title: SQL Injection (SQLi): A Comprehensive Guide
════════════════════════
𐀪 Author: Meravytes
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 17:38:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #meravytes #infosec #bug_bounty #sql_injection
════════════════════════
𐀪 Author: Meravytes
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 17:38:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #meravytes #infosec #bug_bounty #sql_injection
Medium
SQL Injection (SQLi): A Comprehensive Guide
SQL Injection (SQLi) is one of the most prevalent and dangerous vulnerabilities in web applications. It allows an attacker to interfere…
⤷ Title: Why I Stopped Hating SQL (and Started Solving Crimes With It)
════════════════════════
𐀪 Author: NickyCammarata
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 05:56:21 GMT
════════════════════════
⌗ Tags: #web_application_security #web_based_applications #learning_and_development #sql_injection #sql
════════════════════════
𐀪 Author: NickyCammarata
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 05:56:21 GMT
════════════════════════
⌗ Tags: #web_application_security #web_based_applications #learning_and_development #sql_injection #sql
Medium
Why I Stopped Hating SQL (and Started Solving Crimes With It)
A Developer’s Journey From “SELECT * Hell” to Set-Based Zen
⤷ Title: SQL Injection in 2025: Why This Zombie Threat Keeps Rising from the Grave
════════════════════════
𐀪 Author: NickyCammarata
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 16:20:18 GMT
════════════════════════
⌗ Tags: #devsecops #web_security #sql_injection #cyberattack #owasp
════════════════════════
𐀪 Author: NickyCammarata
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 16:20:18 GMT
════════════════════════
⌗ Tags: #devsecops #web_security #sql_injection #cyberattack #owasp
Medium
Home Invasions in Web Security Continue to Rise: SQL Injection Declines to Comment
Why SQL Injection Still Happens in 2025 — and How to Stop It for Good”
⤷ Title: Enumerate MySQL database server using UNION SQL injection
════════════════════════
𐀪 Author: digistam
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 08:08:34 GMT
════════════════════════
⌗ Tags: #sql_injection #ethical_hacking
════════════════════════
𐀪 Author: digistam
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 08:08:34 GMT
════════════════════════
⌗ Tags: #sql_injection #ethical_hacking
Medium
Enumerate MySQL database server using UNION SQL injection
While I’m a big fan of SQLmap and many tutorials rely on it, I’m more motivated to dive deeper into the fundamentals of SQL injection, as…
⤷ Title: Websocket response manipulation leads to access admin panel (Arabic)
════════════════════════
𐀪 Author: rood
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 13:52:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
════════════════════════
𐀪 Author: rood
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 13:52:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
Medium
Websocket response manipulation leads to access admin panel (Arabic)
وأنا أشتغل على هدف في برنامج باونتي، وصلت لموقع فرعي شكله عادي، بس بعد ما تصفحته شوي لاحظت إن فيه نظام صلاحيات، يعني المستخدمين مو كلهم نفس…