Posts
-
Modern SQL Injection in 2026: The Class Did Not Die, It Moved
-
A Semgrep Rule Pack for Header-Trust Auth Bypass Patterns
-
Reading Note: My ZIP Isn't Your ZIP (USENIX Security 2025)
-
IAM Trust Policy Abuse: Patterns Scanners Miss
-
ESC15 / EKUwu: When a Certificate Template's EKU Is Just a Suggestion
-
CVE-2025-29927: Bypassing Next.js Middleware with One HTTP Header
-
Welcome
subscribe via RSS