⤷ Title: TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:31:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102989 #npm #React #Reflected XSS #TanStack #TanStack Start #Web Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:31:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102989 #npm #React #Reflected XSS #TanStack #TanStack Start #Web Security
Daily CyberSecurity
TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
TL;DR TanStack has fixed CVE-2026-102989, an unauthenticated reflected XSS flaw rated CVSS 9.3. This TanStack Start vulnerability lets a crafted link run attacker JavaScript on an app’s own …
⤷ Title: Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication Bypass
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:01:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #web_security #sqli #cybersecurity
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:01:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #web_security #sqli #cybersecurity
Medium
Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication Bypass
Introduction
⤷ Title: The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
════════════════════════
𐀪 Author: Nikhilvarun
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 10:50:02 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #owasp_top_10 #access_control
════════════════════════
𐀪 Author: Nikhilvarun
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 10:50:02 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #owasp_top_10 #access_control
Medium
The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
Websites get hacked every day, and most of the time it’s not some Hollywood genius. It’s a basic mistake: a missing permission check, a…
⤷ Title: Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.
════════════════════════
𐀪 Author: Vivek Yadav
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #authentication_bypass #web_security #ethical_hacking
════════════════════════
𐀪 Author: Vivek Yadav
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #authentication_bypass #web_security #ethical_hacking
Medium
Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.
If you’re going through PortSwigger’s Web Security Academy, the “SQL injection vulnerability allowing login bypass” lab is one of the first…
⤷ Title: Breaking Point: How Browser Breakpoints Can Unmask Encryption and Compromise Security
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:43:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:43:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing
Medium
Breaking Point: How Browser Breakpoints Can Unmask Encryption and Compromise Security
Unveiling the Risks of Client-Side Encryption: Insights and Remediation
⤷ Title: Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
Medium
Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
Your JavaScript Has a Secret. Let’s Find Out What It Is.
⤷ Title: Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 04:55:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_96889 #Next.js #React #Remote Code Execution #shARP #Vercel #Web Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 04:55:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_96889 #Next.js #React #Remote Code Execution #shARP #Vercel #Web Security
Daily CyberSecurity
Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
TL;DR Vercel shipped Next.js 16.4.1 and 15.5.28 on October 14, 2026, in an out-of-band release. The Next.js security update fixes two critical unauthenticated remote code execution flaws and one h…
⤷ Title: >> SOC Analyst: How Blue Team Operations Help Detect and Respond to Cyber Threats
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 05:36:35 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 05:36:35 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security
Medium
>> SOC Analyst: How Blue Team Operations Help Detect and Respond to Cyber Threats
Cybersecurity is not only about finding vulnerabilities and exploiting weaknesses. It is also about detecting attacks, investigating…
⤷ Title: PortSwigger Lab: SQL Injection Vulnerability in WHERE Clause Allowing Retrieval of Hidden Data
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 06:23:45 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #infosec #portswigger #cybersecurity
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 06:23:45 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #infosec #portswigger #cybersecurity
Medium
PortSwigger Lab: SQL Injection Vulnerability in WHERE Clause Allowing Retrieval of Hidden Data
Difficulty: Apprentice
⤷ Title: From Script to Shell: Mastering File Upload Exploits Across Security Levels
════════════════════════
𐀪 Author: Thana Binshibl
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 06:17:46 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #rce_vulnerability #penetration_testing #file_upload_vulnerability
════════════════════════
𐀪 Author: Thana Binshibl
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 06:17:46 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #rce_vulnerability #penetration_testing #file_upload_vulnerability
Medium
From Script to Shell: Mastering File Upload Exploits Across Security Levels
File upload vulnerabilities are among the most critical security flaws in web applications. When an application allows users to upload…
⤷ Title: Frontend ↔ Backend Communication: A Security-Focused Guide
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:01:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #penetration_testing #api_security #web_security
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:01:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #penetration_testing #api_security #web_security
Medium
Frontend ↔ Backend Communication: A Security-Focused Guide
A practical reference for Web Pentesting and Bug Bounty Hunting
⤷ Title: GET vs POST: Which One Is Actually Safer for Sensitive Data?
════════════════════════
𐀪 Author: Haroon Shahid
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 10:27:51 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security #https #penetration_testing
════════════════════════
𐀪 Author: Haroon Shahid
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 10:27:51 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security #https #penetration_testing
Medium
GET vs POST: Which One Is Actually Safer for Sensitive Data?
Two HTTP methods. One common misconception. And a security difference that’s easy to misunderstand.
⤷ Title: How I Solved PortSwigger SQLi Labs 1–6 (Part 1 Walkthrough)
════════════════════════
𐀪 Author: Md Haidar
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 14:12:40 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #cybersecurity #bug_bounty #ethical_hacking
════════════════════════
𐀪 Author: Md Haidar
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 14:12:40 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #cybersecurity #bug_bounty #ethical_hacking
Medium
How I Solved PortSwigger SQLi Labs 1–6 (Part 1 Walkthrough)
Documenting my practical bug hunting journey, methodology, and payloads for labs 1–6
⤷ Title: API Testing: How APIs Really Break
════════════════════════
𐀪 Author: NadaAshraf
════════════════════════
ⴵ Time: Thu, 29 Oct 2026 12:08:00 GMT
════════════════════════
⌗ Tags: #hacking #burpsuite #api_security #pentesting #web_security
════════════════════════
𐀪 Author: NadaAshraf
════════════════════════
ⴵ Time: Thu, 29 Oct 2026 12:08:00 GMT
════════════════════════
⌗ Tags: #hacking #burpsuite #api_security #pentesting #web_security
Medium
API Testing: How APIs Really Break
Most people test web apps by clicking around. The frontend is polished, the buttons do what they say, and everything looks fine.
⤷ Title: JWT Authentication: Structure, Attacks, and Why Weak Signature Validation Gets You Pwned
════════════════════════
𐀪 Author: Muhammad Kashif
════════════════════════
ⴵ Time: Wed, 28 Oct 2026 21:09:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #web_security #api_security #jwt
════════════════════════
𐀪 Author: Muhammad Kashif
════════════════════════
ⴵ Time: Wed, 28 Oct 2026 21:09:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #web_security #api_security #jwt
Medium
JWT Authentication: Structure, Attacks, and Why Weak Signature Validation Gets You Pwned
JSON Web Tokens (JWT) are the backbone of authentication in modern APIs, single page applications, and microservice architectures. They are…
⤷ Title: SQLMap 1 ~ CyLab Security Academy Write-up | Exploiting SQL Injection and Accessing Protected Data
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 05:37:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #sqli #cybersecurity #ctf
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 05:37:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #sqli #cybersecurity #ctf
Medium
SQLMap 1 ~ CyLab Security Academy Write-up | Exploiting SQL Injection and Accessing Protected Data
Author: Affanhaxor Platform: CyLab Security Academy Category: Web Exploitation Challenge: SQLMap 1 Topic: SQL Injection, Database…
⤷ Title: Unauthenticated SQLi in a GraphQL API: From Guest to Admin Takeover
════════════════════════
𐀪 Author: n0itra
════════════════════════
ⴵ Time: Wed, 28 Oct 2026 18:01:51 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #sql_injection #magento #graphql
════════════════════════
𐀪 Author: n0itra
════════════════════════
ⴵ Time: Wed, 28 Oct 2026 18:01:51 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #sql_injection #magento #graphql
Medium
Unauthenticated SQLi in a GraphQL API: From Guest to Admin Takeover
Imagine being able to extract the admin credentials of a massive e-commerce platform without even logging in. No user interaction, no…
⤷ Title: PortSwigger Lab: Blind SQL Injection with Conditional Errors
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Tue, 27 Oct 2026 18:26:21 GMT
════════════════════════
⌗ Tags: #portswigger #cybersecurity #infosec #sql_injection #web_security
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Tue, 27 Oct 2026 18:26:21 GMT
════════════════════════
⌗ Tags: #portswigger #cybersecurity #infosec #sql_injection #web_security
Medium
PortSwigger Lab: Blind SQL Injection with Conditional Errors
Difficulty: Practitioner
⤷ Title: >> XSS vs SQL Injection (SQLi): Understanding Two Common Web Application Vulnerabilities
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Tue, 27 Oct 2026 17:17:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #sql_injection #cybersecurity #web_security
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Tue, 27 Oct 2026 17:17:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #sql_injection #cybersecurity #web_security
Medium
>> XSS vs SQL Injection (SQLi): Understanding Two Common Web Application Vulnerabilities
Web application security is an important part of cybersecurity. Modern applications handle sensitive information, user accounts…
⤷ Title: PortSwigger Lab: Blind SQL Injection with Conditional Responses
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Tue, 27 Oct 2026 07:24:31 GMT
════════════════════════
⌗ Tags: #portswigger #sql_injection #web_security #cybersecurity #infosec
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Tue, 27 Oct 2026 07:24:31 GMT
════════════════════════
⌗ Tags: #portswigger #sql_injection #web_security #cybersecurity #infosec
Medium
PortSwigger Lab: Blind SQL Injection with Conditional Responses
Difficulty: Practitioner