πNew WriteupβοΈ
βββββββββββββββ
πDate: Fri, 14 Jul 2023 06:14:22 GMT
βββββββββββββββ
βοΈTitle: CORS as a Protocol!
βββββββββββββββ
πLink: https://medium.com/p/2fa9f2f1d92e
βββββββββββββββ
Tags: #owasp #cors #cross_origin_resource #cybersecurity #vulnerability
βββββββββββββββ
πDate: Fri, 14 Jul 2023 06:14:22 GMT
βββββββββββββββ
βοΈTitle: CORS as a Protocol!
βββββββββββββββ
πLink: https://medium.com/p/2fa9f2f1d92e
βββββββββββββββ
Tags: #owasp #cors #cross_origin_resource #cybersecurity #vulnerability
Medium
CORS as a Protocol!
According to resources ,It can be described as allowing resources such as Java scripts & web fonts to be loaded from domains other than the origin parent domain. The CORS protocol operates byβ¦
β€· Title: Exploring CORS Misconfiguration Vulnerabilities in Modern Applications
ββββββββββββββββββββββββ
πͺ Author: Arash Shahbazi
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Jan 2025 20:08:41 GMT
ββββββββββββββββββββββββ
β Tags: #cross_origin_resource #pentest #owasp_top_10 #web_application_security #bug_bounty
ββββββββββββββββββββββββ
πͺ Author: Arash Shahbazi
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Jan 2025 20:08:41 GMT
ββββββββββββββββββββββββ
β Tags: #cross_origin_resource #pentest #owasp_top_10 #web_application_security #bug_bounty
Medium
Exploring CORS Misconfiguration Vulnerabilities in Modern Applications
Same Origin Policy (SOP)
β€· Title: CORS (Cross-Origin Resource Sharing)
ββββββββββββββββββββββββ
πͺ Author: Julio
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 28 Feb 2025 17:19:42 GMT
ββββββββββββββββββββββββ
β Tags: #cors #cross_origin #bug_bounty #cookies
ββββββββββββββββββββββββ
πͺ Author: Julio
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 28 Feb 2025 17:19:42 GMT
ββββββββββββββββββββββββ
β Tags: #cors #cross_origin #bug_bounty #cookies
Medium
Cross-Origin Resource Sharing CORS
Part of NahamSecβs BugBounty Course series. Summary + solutions.
β€· Title: Cross-Origin Resource Sharing (CORS)
ββββββββββββββββββββββββ
πͺ Author: Subhadeep Dhar
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 08 Mar 2025 16:12:36 GMT
ββββββββββββββββββββββββ
β Tags: #cors #api_security #cross_origin #web_development #web_vulnerabilities
ββββββββββββββββββββββββ
πͺ Author: Subhadeep Dhar
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 08 Mar 2025 16:12:36 GMT
ββββββββββββββββββββββββ
β Tags: #cors #api_security #cross_origin #web_development #web_vulnerabilities
Medium
Cross-Origin Resource Sharing (CORS)
Mastering CORS: Best Practices for Secure Web Applications
β€· Title: DOM XSS Exploit: Using postMessage and JSON.parse in iframe Attacks
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 04 Jun 2025 04:21:21 GMT
ββββββββββββββββββββββββ
β Tags: #dom_based_xss_attack #bug_bounty_writeup #dom_xss #cross_origin_exploit #iframe_xss_payload
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 04 Jun 2025 04:21:21 GMT
ββββββββββββββββββββββββ
β Tags: #dom_based_xss_attack #bug_bounty_writeup #dom_xss #cross_origin_exploit #iframe_xss_payload
Medium
DOM XSS Exploit: Using postMessage and JSON.parse in iframe Attacks
[Write-up] DOM XSS Using Web Messages and JSON.parse.
β€· Title: Zero-JS Clickjacking: SVG Filters Exploit iFrames to Steal Cross-Origin Data
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 09 Dec 2025 03:32:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Chromium #clickjacking #Cross_Origin #feBlend #Firefox #iFrame #Lira Rebane #SVG Filter #web security
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 09 Dec 2025 03:32:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Chromium #clickjacking #Cross_Origin #feBlend #Firefox #iFrame #Lira Rebane #SVG Filter #web security
β€· Title: CORS and CSRF Vulnerabilities
ββββββββββββββββββββββββ
πͺ Author: Damilola Faith Ashiedu
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 19 Mar 2026 14:57:01 GMT
ββββββββββββββββββββββββ
β Tags: #cross_origin #cybersecurity #application_security #cors #csrf
ββββββββββββββββββββββββ
πͺ Author: Damilola Faith Ashiedu
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 19 Mar 2026 14:57:01 GMT
ββββββββββββββββββββββββ
β Tags: #cross_origin #cybersecurity #application_security #cors #csrf
Medium
CORS and CSRF Vulnerabilities
Hands-on documentation of Cross Origin β CORS and CSRF exploitation across two vulnerable applications, bWAPP for CORS misconfiguration andβ¦
β€· Title: CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 21 May 2026 23:29:12 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Binding Operational Directive #CISA KEV #Cross_Origin Resource Sharing #CVE_2025_34291 #CVE_2026_34926 #Cyber Security #Directory Traversal #infosec #Langflow #Remote Code Execution #SameSite Cookie #Trend Micro Apex One
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 21 May 2026 23:29:12 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Binding Operational Directive #CISA KEV #Cross_Origin Resource Sharing #CVE_2025_34291 #CVE_2026_34926 #Cyber Security #Directory Traversal #infosec #Langflow #Remote Code Execution #SameSite Cookie #Trend Micro Apex One
Daily CyberSecurity
CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
CISA updates its KEV Catalog with critical flaws in Langflow (CVE-2025-34291) and Trend Micro Apex One. Federal agencies ordered to patch by June 4, 2026.