Analyzing PHPKB v9: Part three

The third part of a series where I will talk about vulnerabilities found in a knowledge-base software written in PHP. Vulnerabilities analyzed: Cross-Site Request Forgery.

Analyzing PHPKB v9: Part two

The second part of a series where I will talk about vulnerabilities found in a knowledge-base software written in PHP. Vulnerabilities analyzed: Cross-Site Scripting.

Analyzing PHPKB v9: Part one

The first part of a series where I will talk about vulnerabilities found in a knowledge-base software written in PHP. Vulnerabilities analyzed: Arbitrary File Download, Remote Code Execution, Blind Cross-Site Scripting, Arbitrary File Renaming, Arbitrary Folder Deletion, CSV Injection, Arbitrary File Listing.

Hacking Fastweb: Responsible Disclosure

Analisi di due vulnerabilità critiche scoperte nell'applicazione android MyFastweb e nel sito web www.fastweb.it.