#xss
2 registros
-
University
Linux Hard: stored XSS com bypass de WAF por Unicode NFKC rouba a sessão admin, upload dupla-extensão vira RCE e glibc-hwcaps hijack leva a root.
-
Imagery
App Python/Werkzeug: stored XSS rouba o cookie do admin, LFI exfiltra o source e command injection dá foothold; root via sudo no backup manager charcol.