⤷ Title: Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 20 Sep 2025 17:33:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #persistent_xss_via_cache #web_cache_poisoning #http_header_injection #cache_poisoning_attack
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 20 Sep 2025 17:33:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #persistent_xss_via_cache #web_cache_poisoning #http_header_injection #cache_poisoning_attack
Medium
Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers
Learn how combining X-Forwarded-Host and X-Original-URL vulnerabilities can poison web caches, delivering persistent XSS to unsuspecting…
⤷ Title: Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 08:23:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #persistent_xss_via_cache #web_cache_poisoning #http_header_injection #cache_poisoning_attack
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 08:23:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #persistent_xss_via_cache #web_cache_poisoning #http_header_injection #cache_poisoning_attack
Medium
Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers
Learn how combining X-Forwarded-Host and X-Original-URL vulnerabilities can poison web caches, delivering persistent XSS to unsuspecting…
⤷ Title: Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 07 Oct 2025 08:34:36 GMT
════════════════════════
⌗ Tags: #crlf_injection #web_cache_poisoning #cache_key_injection #http_parameter_pollution #bug_bounty
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 07 Oct 2025 08:34:36 GMT
════════════════════════
⌗ Tags: #crlf_injection #web_cache_poisoning #cache_key_injection #http_parameter_pollution #bug_bounty
Medium
Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
Learn how cache key injection works, why it leads to large-scale cache poisoning, and the real-world risks for modern web applications.
⤷ Title: New Cache Smuggling Phishing Attack Delivers Malware via Browser Cache
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 03:51:57 +0000
════════════════════════
⌗ Tags: #Malware #Cache Smuggling #ClickFix #FileFix #Fortinet Lure #Malware Evasion #PowerShell #Security Advisory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 03:51:57 +0000
════════════════════════
⌗ Tags: #Malware #Cache Smuggling #ClickFix #FileFix #Fortinet Lure #Malware Evasion #PowerShell #Security Advisory
Penetration Testing Tools
New Cache Smuggling Phishing Attack Delivers Malware via Browser Cache
A new phishing variant uses cache smuggling to hide a malicious ZIP in the browser cache. The FileFix lure then executes PowerShell to install malware without any downloads.
⤷ Title: Zero-Download Malware: New Cache Smuggling Phishing Attack Delivers Payload via Browser Cache
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 00:19:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cache Smuggling #ClickFix #Expel #Fortinet #Malware Evasion #phishing #powershell #Zero_Download
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 00:19:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cache Smuggling #ClickFix #Expel #Fortinet #Malware Evasion #phishing #powershell #Zero_Download
Daily CyberSecurity
Zero-Download Malware: New Cache Smuggling Phishing Attack Delivers Payload via Browser Cache
Expel uncovered a phishing attack using Cache Smuggling to deliver malware. The technique uses a fake Fortinet lure and PowerShell to execute a payload staged in the browser's cache, bypassing network detection.
⤷ Title: DNS Warning: Critical BIND Flaws Revive Cache Poisoning Attack Threat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 07:03:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #BIND #Cache Poisoning #cybersecurity #DNS #Kaminsky Attack #vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 07:03:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #BIND #Cache Poisoning #cybersecurity #DNS #Kaminsky Attack #vulnerability
Penetration Testing Tools
DNS Warning: Critical BIND Flaws Revive Cache Poisoning Attack Threat
Critical BIND flaws in pseudo-random number generation and response validation threaten to revive DNS cache poisoning attacks. Update immediately.
⤷ Title: Web Cache Poisoning : Ancaman di Balik Kecepatan
════════════════════════
𐀪 Author: Dani Ilman
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 18:08:57 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #cache #xss_attack #bug_bounty_writeup #bug_bounty
════════════════════════
𐀪 Author: Dani Ilman
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 18:08:57 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #cache #xss_attack #bug_bounty_writeup #bug_bounty
Medium
Web Cache Poisoning : Ancaman di Balik Kecepatan
Di masa yang serba real-time, cache layaknya “ingatan singkat” yang berguna untuk menyimpan salinan respons HTTP seperti HTML, JS, gambar…
⤷ Title: Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:38:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #web_cache_deception #cache
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:38:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #web_cache_deception #cache
Medium
Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications
A small mis configuration pays !!!
⤷ Title: Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 07:55:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #web_cache_deception #cache
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 07:55:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #web_cache_deception #cache
Medium
Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications
A small mis-configuration pays !!!
⤷ Title: Stop Deleting Photos: 6 iPhone Storage Hacks You’ll Wish You Knew Sooner
════════════════════════
𐀪 Author: Ning
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 22:47:50 GMT
════════════════════════
⌗ Tags: #hacking #iphone #cache #storage #offload_app
════════════════════════
𐀪 Author: Ning
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 22:47:50 GMT
════════════════════════
⌗ Tags: #hacking #iphone #cache #storage #offload_app
Medium
Stop Deleting Photos: 6 iPhone Storage Hacks You’ll Wish You Knew Sooner
There are few tech frustrations as universal as seeing the “iPhone Storage Almost Full” notification pop up. It almost always happens at…
⤷ Title: 4 Critical Vulnerabilities that Created Complete Systemic Failure In a Popular WordPress Deployment
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 05:23:12 GMT
════════════════════════
⌗ Tags: #vulnerability #lessons_learned #wordpress #cache #cybersecurity
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 05:23:12 GMT
════════════════════════
⌗ Tags: #vulnerability #lessons_learned #wordpress #cache #cybersecurity
Medium
4 Critical Vulnerabilities that Created Complete Systemic Failure In a Popular WordPress Deployment
You might be thinking, “Why should I even worry about securing my WordPress site?” Here’s why:
⤷ Title: Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 13:14:32 GMT
════════════════════════
⌗ Tags: #crlf_injection #web_cache_poisoning #cache_key_injection #http_parameter_pollution #bug_bounty
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 13:14:32 GMT
════════════════════════
⌗ Tags: #crlf_injection #web_cache_poisoning #cache_key_injection #http_parameter_pollution #bug_bounty
Medium
Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
Learn how cache key injection works, why it leads to large-scale cache poisoning, and the real-world risks for modern web applications.
⤷ Title: The 9.6 Crack in Java’s Foundation: Critical Undertow Flaw CVE-2025-12543
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:22:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Critical Vulnerability #CVE_2025_12543 #host header injection #Java security #JBoss EAP #Undertow #WildFly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:22:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Critical Vulnerability #CVE_2025_12543 #host header injection #Java security #JBoss EAP #Undertow #WildFly
Daily CyberSecurity
The 9.6 Crack in Java’s Foundation: Critical Undertow Flaw CVE-2025-12543
A foundational crack has been discovered in the bedrock of the Java web ecosystem. Undertow, the high-performance web server that powers enterprise heavyweights like WildFly and JBoss EAP, has bee…
⤷ Title: Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
Daily CyberSecurity
Critical Request Smuggling & Cache Flaws Discovered in Cloudflare's Pingora
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
⤷ Title: The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
Daily CyberSecurity
The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
A critical 9.1 CVSS flaw in Spring Security (CVE-2026-22732) fails to write HTTP headers, exposing Java apps to severe data leaks. Update immediately.
⤷ Title: Whitespace Flaw Re-Opens Critical JWT “Algorithm Confusion” Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Algorithm Confusion #Authentication Bypass #Cache Collision #CVE_2026_34950 #CVE_2026_35039 #cybersecurity #fast_jwt #HMAC #infosec #JWT #Node.js #Regex Flaw #RSA #Web Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Algorithm Confusion #Authentication Bypass #Cache Collision #CVE_2026_34950 #CVE_2026_35039 #cybersecurity #fast_jwt #HMAC #infosec #JWT #Node.js #Regex Flaw #RSA #Web Security
Daily CyberSecurity
Whitespace Flaw Re-Opens Critical JWT "Algorithm Confusion" Bypass
CVE-2026-34950: A critical 9.1 CVSS flaw in fast-jwt allows authentication bypass via leading whitespace. Learn how a regex error leads to algorithm confusion.
⤷ Title: When Logout Isn’t Really Goodbye: A Subtle Data Exposure Bug.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sat, 02 May 2026 07:46:46 GMT
════════════════════════
⌗ Tags: #p4_bugs #bug_bounty #cache_memory #logouts
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sat, 02 May 2026 07:46:46 GMT
════════════════════════
⌗ Tags: #p4_bugs #bug_bounty #cache_memory #logouts
Medium
When Logout Isn’t Really Goodbye: A Subtle Data Exposure Bug.
When Logout Isn’t Really Goodbye: A Subtle Data Exposure Bug. How a “low severity” simple P4 bug still managed to teach a high-value lesson (and yes… it paid 💰). Beginner …
⤷ Title: Pentesterlar neden Cache bilmeli?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Thu, 21 May 2026 22:33:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #cache #penetration_testing #web_security #bug_bounty
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Thu, 21 May 2026 22:33:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #cache #penetration_testing #web_security #bug_bounty
Medium
Pentesterlar neden Cache bilmeli?
Red Team/ Pentest alanında uzmanlaşmak istiyorsanız sistemin çalışma mantığını da çözmelisiniz arkadaşlar. İsteğin girişinden çıkışına…
⤷ Title: Critical Memcached SASL Vulnerability Fixed in Version 1.6.42
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 01:37:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Store #CVE_2026_47783 #CVE_2026_47784 #Memcached #SASL Authentication #security patch #Timing Side Channel
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 01:37:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Store #CVE_2026_47783 #CVE_2026_47784 #Memcached #SASL Authentication #security patch #Timing Side Channel
Daily CyberSecurity
Critical Memcached SASL Vulnerability Fixed in Version 1.6.42
Learn about the critical Memcached SASL vulnerability flaws fixed in version 1.6.42. Discover how timing side channels impacted authentication.