CVE-2020-35774: twitter-server XSS Vulnerability Discovered

According to its official documentation, “twitter-server” is a Twitter OSS project used to provide a template from which servers at Twitter are built. It provides common application components such as an administrative HTTP server, tracing, stats, and more, and is used, amongst other things, by both the Finagle and Finatra frameworks. After researching twitter-server, theRead More ›

Technical Blog Archives - /zh

CVE-2023-31145: Reflected XSS vulnerability · Advisory · CollaboraOnline/online · GitHub

Found Stored Cross-Site Scripting — What's Next? — Privilege Escalation like a Boss :D, by Harsh Bothra

Technical Blog Archives - /ko

GitHub - VoidSec/CVE-2020-1472: Exploit Code for CVE-2020-1472 aka Zerologon

CVE-2020-1472: Advanced Persistent Threat Actors Use Zerologon Vulnerability In Exploit Chain with Unpatched Vulnerabilities - Blog

Twitter users fall victim to new XSS worm

Woody RAT: A new feature-rich malware spotted in the wild - vulnerability database

Checkmarx Research: Apache Dubbo 2.7.3 – Unauthenticated RCE via Deserialization of Untrusted Data (CVE-2019-17564) - Security Boulevard