[ GCP 2022 ] Few bugs in the google cloud shell
Target Program: Google
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.
More Writeups Like This
pentester.land
by Mosaad Sallam (@h0tak88r), Mohamed Walid (@L0daW)AI Under Siege: Discovering and Exploiting Vulnerabilities
pentester.land
by Adam CrosserTechnical Advisory: Vulnerabilities Identified within ListServ
pentester.land
by Fares Walid (@SirBagoza)CSRF + Stored XSS Leading to Full Account Takeover
pentester.land
by Sandro Einfeldt