All articles

• Remote Code Execution in Logseq (just another XSS to RCE in an Electron app) Aug 21, 2025
• Threat modeling: PhaaS, platform abuses, and content moderation Mar 7, 2025
• JavaScript-based PDF Viewers, Cross Site Scripting, and PDF files Aug 27, 2024
• Javascript Injection in six Android mail clients Feb 15, 2020
• About Chinese propaganda on Twitter: drawing data 📊 Dec 3, 2019
• About Iran and IRA Twitter datasets (for fun) – Part III Sep 15, 2019
• #Hack5Stelle Aug 13, 2019
• About Iran and IRA Twitter datasets (for fun) – Part II May 20, 2019
• Router D-Link DVA-5592 – Authentication Bypass Dec 16, 2018
• About Iran and IRA Twitter datasets (for fun) – Part I Dec 7, 2018
• Configurare un Pi-Hole portatile Nov 2, 2018
• From XSS to RCE in Simplenote 1.1.3 Jul 29, 2018
• Stored XSS in Microsoft Bing Apr 21, 2018
• Events Manager 5.8.1.1 – Stored XSS Mar 25, 2018
• Multiple stored XSS in AOL Mail Mar 23, 2018
• Utilizzare il Raspberry Pi 3 via Termux Mar 7, 2018
• Stored XSS via cloud attachment Jan 20, 2018
• Stored XSS in touch.mail.ru Dec 27, 2017
• XSSSonar: python tool to look for XSS Dec 16, 2017