⤷ Title: Login - CTF Write-up | Finding Exposed Credentials in JavaScript
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 05:16:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #javascript #ctf #bug_bounty
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 05:16:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #javascript #ctf #bug_bounty
Medium
Login - CTF Write-up | Finding Exposed Credentials in JavaScript
Introduction
⤷ Title: A Fake CAPTCHA Appeared in Our Admin Portal: What I Learned About ClickFix Attacks and Third-Party…
════════════════════════
𐀪 Author: Alamgir Hossen
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 17:53:04 GMT
════════════════════════
⌗ Tags: #software_engineering #javascript #application_security #nodejs #cybersecurity
════════════════════════
𐀪 Author: Alamgir Hossen
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 17:53:04 GMT
════════════════════════
⌗ Tags: #software_engineering #javascript #application_security #nodejs #cybersecurity
Medium
A Fake CAPTCHA Appeared in Our Admin Portal: What I Learned About ClickFix Attacks and Third-Party JavaScript Security
An unexpected security incident in a Node.js project taught me why we should never blindly trust scripts loaded from external sources.
⤷ Title: Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
Medium
Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
Your JavaScript Has a Secret. Let’s Find Out What It Is.
⤷ Title: Beyond Rows and Columns: Interactive Ext JS Grids and ReExt for React Developers
════════════════════════
𐀪 Author: Vishal P
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:53:13 GMT
════════════════════════
⌗ Tags: #web_development #application_security #mobile_app_development #javascript
════════════════════════
𐀪 Author: Vishal P
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:53:13 GMT
════════════════════════
⌗ Tags: #web_development #application_security #mobile_app_development #javascript
Medium
Beyond Rows and Columns: Interactive Ext JS Grids and ReExt for React Developers
A data grid can display thousands of records and still leave users doing too much work.
⤷ Title: Reactor (HackTheBox): When a Website With Nothing to Click Still Gets You Root
════════════════════════
𐀪 Author: Abul Kalam Azad
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 18:51:19 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #javascript #cybersecurity #nextjs
════════════════════════
𐀪 Author: Abul Kalam Azad
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 18:51:19 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #javascript #cybersecurity #nextjs
Medium
Reactor (HackTheBox): When a Website With Nothing to Click Still Gets You Root
A beginner-friendly walkthrough of a Next.js deserialization bug, a database full of ancient hashes, and a debugger nobody turned off.
⤷ Title: Your Next.js OG Image Pipeline Has a Critical RCE Vulnerability
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:31:01 GMT
════════════════════════
⌗ Tags: #javascript #appsec #javascript_frameworks #application_security
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:31:01 GMT
════════════════════════
⌗ Tags: #javascript #appsec #javascript_frameworks #application_security
Medium
Your Next.js OG Image Pipeline Has a Critical RCE Vulnerability
A dependency you never call directly just became a remote code execution vector in your image generation pipeline. That’s the shape of the…
⤷ Title: When a UI API Becomes a Security Boundary
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #javascript #web_development #application_security
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #javascript #web_development #application_security
Medium
When a UI API Becomes a Security Boundary
Somewhere in your Next.js app there’s probably a function call that looks harmless. You pass it a JSX element — a title, a background…
⤷ Title: Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 02:00:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_114125 #developer security #javascript #npm #Storybook
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 02:00:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_114125 #developer security #javascript #npm #Storybook
Daily CyberSecurity
Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
TL;DR Storybook has patched CVE-2026-114125, a CVSS 9.4 Storybook dev server vulnerability that lets a malicious website change files in a developer’s project. Under further conditions, the …