It's starting to look a lot like Christ^WHackMas
🔐 Another JWT Algorithm Confusion Vulnerability: CVE-2024-54150
Why shouldn't I share my own content? Here's a shameless plug for my article on the JWT Algorithm Confusion Vulnerability I found in a C library.
🐘 How an Obscure PHP Footgun Led to RCE in Craft CMS
Check out this excellent write-up by the Assenote team on how an obscure PHP footgun led to RCE in Craft CMS.
📚 AppSec eZine #566
The latest edition of AppSec eZine is here! Read issue #566.
