Vulnerability
Handling Log4Shell vulnerability
Summarizing the current state of advice regarding the Log4j vulnerability.
Vulnerability
Archived
Java Deserialization Security FAQ
Details about the vulnerability class Untrusted Deserialization.
Vulnerability
Archived
Chrome SOP-Bypass with SVG
Writeup of my Same-Origin Policy Bypass in Chrome with SVG (CVE-2014-3160).
Vulnerability
Archived
Generic XXE Detection
Generic Detection of XML External Entity (XXE) Vulnerabilities.
Vulnerability
Archived
Cross-Site WebSocket Hijacking (CSWSH)
Details about the vulnerability class I identified in the HTML5 WebSocket specification (RFC 6455).