⤷ Title: Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 17:24:11 GMT
════════════════════════
⌗ Tags: #cors #owasp_top_10 #bug_bounty #misconfiguration #api
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 17:24:11 GMT
════════════════════════
⌗ Tags: #cors #owasp_top_10 #bug_bounty #misconfiguration #api
Medium
Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
Free Article Link: Click for free!
⤷ Title: Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:29:53 GMT
════════════════════════
⌗ Tags: #cors #owasp_top_10 #bug_bounty #misconfiguration #api
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:29:53 GMT
════════════════════════
⌗ Tags: #cors #owasp_top_10 #bug_bounty #misconfiguration #api
Medium
Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
Free Article Link: Click for free!
⤷ Title: A Tiny CORS Header That Quietly Undid Years of Security Work
════════════════════════
𐀪 Author: 1$ Mistake
════════════════════════
ⴵ Time: Sun, 11 Jan 2026 13:27:45 GMT
════════════════════════
⌗ Tags: #cors #programming #bug_bounty #bugs #hacking
════════════════════════
𐀪 Author: 1$ Mistake
════════════════════════
ⴵ Time: Sun, 11 Jan 2026 13:27:45 GMT
════════════════════════
⌗ Tags: #cors #programming #bug_bounty #bugs #hacking
Medium
A Tiny CORS Header That Quietly Undid Years of Security Work
On a Friday afternoon, a developer pushed a tiny change to a config file. It was the kind of update nobody expects to matter — a single…
⤷ Title: Securing API Servers: What CORS, Headers, and Error Messages Reveal About API Security
════════════════════════
𐀪 Author: Kipc-Sharon
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 12:27:31 GMT
════════════════════════
⌗ Tags: #cors #api_security #security_header
════════════════════════
𐀪 Author: Kipc-Sharon
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 12:27:31 GMT
════════════════════════
⌗ Tags: #cors #api_security #security_header
Medium
Securing API Servers: What CORS, Headers, and Error Messages Reveal About API Security
A. Introduction
⤷ Title: Securing API Servers: What CORS, Headers, and Error
Messages Reveal About API Security
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 10:20:14 GMT
════════════════════════
⌗ Tags: #cors #security_header #api_security #api #error_handling
Messages Reveal About API Security
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 10:20:14 GMT
════════════════════════
⌗ Tags: #cors #security_header #api_security #api #error_handling
Medium
Securing API Servers: What CORS, Headers, and Error
Messages Reveal About API Security
Messages Reveal About API Security
Introduction
⤷ Title: What are CORS vulnerabilities (cross-origin resource sharing)?
════════════════════════
𐀪 Author: BinaryShield
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 16:51:55 GMT
════════════════════════
⌗ Tags: #binaryshield #ethical_hacking #cors #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: BinaryShield
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 16:51:55 GMT
════════════════════════
⌗ Tags: #binaryshield #ethical_hacking #cors #cybersecurity #penetration_testing
Medium
What are CORS vulnerabilities (cross-origin resource sharing)?
1. What it is (very simple definition)
⤷ Title: CORS End-to-End: How Browsers Enforce It, How Attackers Break It, How Devs Fix It
════════════════════════
𐀪 Author: Vikash Vishnoi
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 19:01:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #cors #cybersecurity #backend_development #backend
════════════════════════
𐀪 Author: Vikash Vishnoi
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 19:01:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #cors #cybersecurity #backend_development #backend
Medium
CORS End-to-End: How Browsers Enforce It, How Attackers Break It, How Devs Fix It
Your API is leaking authenticated user data to any website on the internet right now. You just don’t know it yet.
⤷ Title: From CORS Misconfiguration to Sensitive Data Exposure
════════════════════════
𐀪 Author: montaser mohsen
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 18:40:08 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_tips #web_security #cors #bug_bounty
════════════════════════
𐀪 Author: montaser mohsen
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 18:40:08 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_tips #web_security #cors #bug_bounty
Medium
From CORS Misconfiguration to Sensitive Data Exposure
My name is Montaser Mohsen, and I’m an independent security researcher and bug bounty hunter. I spend a large part of my time analyzing web…
⤷ Title: Critical 9.7 CVSS TinaCMS Flaw Exposes Local Developer Machines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 13:03:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CORS Misconfiguration #CVE_2026_28792 #CVSS 9.7 #cybersecurity #developer security #Drive_by Attack #File Exfiltration #infosec #Path Traversal #TinaCMS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 13:03:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CORS Misconfiguration #CVE_2026_28792 #CVSS 9.7 #cybersecurity #developer security #Drive_by Attack #File Exfiltration #infosec #Path Traversal #TinaCMS
Daily CyberSecurity
Critical 9.7 CVSS TinaCMS Flaw Exposes Local Developer Machines
Critical 9.7 CVSS flaw in TinaCMS (CVE-2026-28792) lets attackers hijack local developer machines via CORS and path traversal. Patch to 2.1.8 immediately.
⤷ Title: CORS and CSRF Vulnerabilities
════════════════════════
𐀪 Author: Damilola Faith Ashiedu
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:57:01 GMT
════════════════════════
⌗ Tags: #cross_origin #cybersecurity #application_security #cors #csrf
════════════════════════
𐀪 Author: Damilola Faith Ashiedu
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:57:01 GMT
════════════════════════
⌗ Tags: #cross_origin #cybersecurity #application_security #cors #csrf
Medium
CORS and CSRF Vulnerabilities
Hands-on documentation of Cross Origin — CORS and CSRF exploitation across two vulnerable applications, bWAPP for CORS misconfiguration and…