2 writeups tagged web-security.
Learn about race conditions, their types, exploitation techniques, and mitigation strategies.
A critical CORS misconfiguration allowed stealing authentication tokens by abusing a wildcard-like origin match and Access-Control-Allow-Credentials: true.