public-pentesting-reports

Report pubblici di penetration testing Un repository che contiene report di penetration test pubblicati da società di consulenza e gruppi accademici di sicurezza. Mantenuto da Julio @ Blaze Information Security https://www.blazeinfosec.com. Basato su un elenco avviato nel 2015 da Arne Padmos. Ved...

X (Formerly Twitter): Tracking of users on third-party websites using the Twitter cookie, due to a flaw in authenticating image requests

Summary: As part of our SoftwareLab@TU Darmstadt latest research project, we discovered a privacy-related vulnerability in multiple high-profile websites, including Twitter. An attacker exploiting this vulnerability can identify a user of your website while the user visits an attacker-controlled...