introduction

My practical learning experience with HTTP requests, cookies, Base64 encoding, and session-token security.

You can secure your login page with everything you’ve got. But what happens when someone clicks “Forgot Password”?

A mathematical, algorithmic, and architectural deep dive into why naive scanners drown in false positives, how HTML5 state machine parsing…

How I found my first resolved vulnerability after duplicates and informative reports.

A practitioner’s walk through SAST, DAST, manual pentesting and the OWASP checklist, and how to layer them so gaps don’t line up.

Introduction

TL;DR TanStack has fixed CVE-2026-102989, an unauthenticated reflected XSS flaw rated CVSS 9.3. This TanStack Start vulnerability lets a crafted link run attacker JavaScript on an app’s own …

Introduction

Websites get hacked every day, and most of the time it’s not some Hollywood genius. It’s a basic mistake: a missing permission check, a…