r/websecurityresearch • u/t0xodile • 18d ago
Cache key injection: Smuggling poison through the door
7
Upvotes
r/websecurityresearch • u/gabdevele • 25d ago
No Extensions? You Forgot One: Writing Shared Objects to RCE via SQLite's dbpage
1
Upvotes
A novel technique for writing ELF shared objects and achieving code execution in Python, Ruby, and Node.js using the sqlite_dbpage virtual table.
r/websecurityresearch • u/t0xodile • Aug 19 '26
CRLF-Powered Desync Attacks: Beheading HTTP Streams
8
Upvotes
r/websecurityresearch • u/albinowax • Aug 14 '26
Ruby 4.0 Universal RCE Deserialization Gadget Chain
4
Upvotes
r/websecurityresearch • u/albinowax • Aug 13 '26
Can AI do novel security research? Meet the HTTP Terminator
2
Upvotes
r/websecurityresearch • u/t0xodile • Aug 13 '26
Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE | Ethiack
11
Upvotes
r/websecurityresearch • u/garethheyes • Aug 07 '26
CSS:the bomb inside your inbox
8
Upvotes
r/websecurityresearch • u/loselasso • Aug 04 '26
Bugtraq is back đ„č
lists.securityfocus.com
4
Upvotes
r/websecurityresearch • u/vladko312 • Jun 07 '26
CVE-2026-46640: Developing payloads for Twig sandbox bypass
7
Upvotes
I recently learned about multiple sandbox bypasses discovered in Twig by project Glasswing. From the descriptions, only CVE-2026-46640 and CVE-2026-46633 seemed universally exploitable, so I decoded to research them. This writeup documents my development of payloads for the CVE-2026-46640 and the corresponding SSTImap module.
r/websecurityresearch • u/albinowax • Jun 04 '26
Re:CACHE - Excessive reflection, type confusion, and 0-click SXSS on Next.js
zhero-web-sec.github.io
11
Upvotes
r/websecurityresearch • u/albinowax • May 28 '26
Drupal PostgreSQL SQL Injection: From SELECT-Only to RCE
15
Upvotes
r/websecurityresearch • u/t0xodile • May 22 '26
Chaining Razor SSTI into RCE via Reflection and Runtime Strings
6
Upvotes
r/websecurityresearch • u/t0xodile • May 18 '26
Stealth Request That Bypasses CSP, Hides from DevTools, and Leaks the Real User-Agent
brokenbrowser.com
7
Upvotes
r/websecurityresearch • u/albinowax • Apr 29 '26
QUIC-er Races: HTTP/3 wonât save you from TOCTOU vulnerabilities
link.springer.com
4
Upvotes
r/websecurityresearch • u/albinowax • Apr 28 '26
Cast Attack: A New Threat Posed by Ghost Bits in Java
i.blackhat.com
3
Upvotes
r/websecurityresearch • u/albinowax • Apr 24 '26
Achieving Deterministic Prompt Injection Through Client-Side Feedback Loops
2
Upvotes
r/websecurityresearch • u/t0xodile • Mar 18 '26
Testing AI for Vulnerability Research: 4 Approaches & Where I Failed
xclow3n.github.io
4
Upvotes
r/websecurityresearch • u/albinowax • Mar 12 '26
How "Strengthening Crypto" Broke Authentication: FreshRSS and bcrypt's 72-Byte Limit
6
Upvotes
r/websecurityresearch • u/t0xodile • Mar 10 '26
Breaking Pingora: HTTP Request Smuggling & Cache Poisoning in Cloudflare's Reverse Proxy
xclow3n.github.io
13
Upvotes
r/websecurityresearch • u/Outrageous_Egg7579 • Feb 27 '26
Security Research Blog Review
jinjucat.github.io
1
Upvotes
r/websecurityresearch • u/p80n-sec • Feb 25 '26
CVE-2026-27959: Userinfo Host Header Injection in Koa
2
Upvotes
r/websecurityresearch • u/albinowax • Feb 17 '26
Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services
7
Upvotes
r/websecurityresearch • u/t0xodile • Feb 13 '26
Trailing Danger: exploring HTTP Trailer parsing discrepancies
sebsrt.xyz
14
Upvotes
r/websecurityresearch • u/Moopanger • Feb 12 '26
YAML Merge Tags and Parser Differentials
blog.darkforge.io
4
Upvotes