| user: | pentestercrab |
| created: | August 11, 2015 |
| karma: | 2.3k |
| 1. | Nastystereo.com(nastystereo.com) |
| 2. | |
| 3. | The Sunlight CT Log(sunlight.dev) |
| 4. | |
| 5. | |
| 6. | Ruby Array Pack Bleed(nastystereo.com) |
| 7. | Ruby Array Pack Bleed – Impacts Ruby 1.6.7 to 4.0.0(nastystereo.com) |
| 8. | |
| 9. | Marshal madness: A brief history of Ruby deserialization exploits(blog.trailofbits.com) |
| 10. | |
| 11. | |
| 12. | Escaping Ruby's Gem:SafeMarshal Sandbox(nastystereo.com) |
| 13. | Escaping Ruby's Gem:SafeMarshal Sandbox(nastystereo.com) |
| 14. | |
| 15. | CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons(pentesterlab.com) |
| 16. | Shiny Vulnerabilities in R's Most Popular Web Framework(nastystereo.com) |
| 17. | |
| 18. | Cross-Site Post Requests Without a Content-Type Header – CSRF Attack(nastystereo.com) |
| 19. | |
| 20. | JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review(pentesterlab.com) |
| 21. | Chosen-Prefix Collisions on AES-Like Hashing(eprint.iacr.org) |
| 22. | Ruby 3.4 Universal RCE Deserialization Gadget Chain(nastystereo.com) |
| 23. | Ruby's String Slice is Broken(nastystereo.com) |
| 24. | Evaluate Markdown code blocks within Vim(github.com) |