World Wide Web Security
Visit littlemaninmyhead.wordpress.com → RSS feedOn Hacker News Nov 2015 – Aug 2025
Security & Privacy 3Software Engineering 2Math & Algorithms 2Tools & Productivity 1
Some time ago, I was doing a web application penetration test, and noticed that the authentication tokens were UUIDs. This I knew was risky, and in fact if you read the UUID rfc, section 6 of it wa…
CVE-2025-7783 is a very recent vulnerability affecting a lot of applications in the Node.js ecosystem including those which use axios or the deprecated request library. In all honesty, this vulnera…