CVE-2026-42195 Identity Provider Hijacking e OAuth Spoofing no draw.io
A deep dive into discovering CVE-2026-42195, a critical Identity Provider Hijacking and OAuth Spoofing vulnerability in draw.io through white-box testing.
flexinz
How I Found 2 Critical Vulnerabilities in an AI-Driven SaaS
A deep dive into Prompt Injection and Sensitive Information Disclosure within an AI-powered resume optimizer.
The Privacy Illusion - Why Local AIs Are the New Cybersecurity Nightmare
A cold reflection on the future of locally hosted LLMs in corporate environments.
Vibecoding - How I Pwned an AI-Generated SaaS in 5 Minutes
An analysis of Mass Assignment, IDOR, and plain-text passwords in applications generated by LLMs without proper prompting.