Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

crnkovic.dev

crnkovic.dev/rss/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 5

  1. WSO2 #3: Server-side request forgery

    (crnkovic.dev)

    This is my series on vulnerabilities I discovered in WSO2 software in 2025: 404 to arbitrary file read The many ways to bypass authentication Server-side request forgery … CVE-2025-5350 and CVE-2025-5605 combined make a pre-auth server-side request forgery

  2. WSO2 #2: The many ways to bypass authentication in WSO2 products

    (crnkovic.dev)

    This is my series on vulnerabilities I discovered in WSO2 software in 2025: 404 to arbitrary file read The many ways to bypass authentication Server-side request forgery … CVE-2025-9152, CVE-2025-10611, and CVE-2025-9804 are critical authentication bypass…

  3. WSO2 #1: 404 to arbitrary file read

    (crnkovic.dev)

    This is my series on vulnerabilities I discovered in WSO2 software in 2025: 404 to arbitrary file read The many ways to bypass authentication Server-side request forgery … CVE-2025-2905 is a blind XXE vulnerability in WSO2 API Manager and other WSO2 produ…

  4. Testing a new encrypted messaging app's extraordinary claims

    (crnkovic.dev)

    How I accidentally breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger called Converso I recently heard this ad on a podcast: I use the Converso app for privacy because I care about privacy, and because…

  5. Signal Groups V2 is a privacy downgrade

    (crnkovic.dev)

    Context: A few years ago, Signal changed the way end-to-end encrypted group conversations work.