DevBlog Security Bypass Vulnerability

DevBlog is a blogging project developed using Node.js Express and MongoDB by Arman Idrisi, an individual developer. A security bypass vulnerability exists in DevBlog v1.0, which can be exploited by an attacker to access any user's session...

DevBlog Cross-Site Scripting Vulnerability

DevBlog is a blogging project developed using Node.js Express and MongoDB by Arman Idrisi, an individual developer. A cross-site scripting vulnerability exists in DevBlog v1.0, which stems from the application's lack of valid validation of uploaded files and can be exploited by an attacker to...