UnboundCompute Security https://validator.w3.org/feed/docs/rss2.html Detecting HTTP Request Smuggling Safely Connection State Request Smuggling Request Tunnelling Attack Explained Capturing Other Users Requests With a Desync Request Smuggling WAF Bypass Request Smuggling Cache Poisoning Response Queue Poisoning Pause Based Desync Attack CL.0 Request Smuggling Browser Powered Request Smuggling Client Side Desync Attack HTTP/2 CRLF Header Injection HTTP/2 Request Splitting Explained How h2c Smuggling Works HTTP/2 Downgrade Smuggling Explained Transfer Encoding Obfuscation Explained Duplicate Content Length Smuggling TE.TE Request Smuggling TE.CL Request Smuggling CL.TE Request Smuggling Terrapin Attack Explained Chosen Prefix Collision Attack Explained Cipher Downgrade Attack Explained Lucky Thirteen Attack Explained Constant Time Comparison: Why Equality Checks Leak Secrets Compression Oracle Attack: Leaking Secrets by Length Key Commitment Attack: When AEAD Trusts Two Keys Partitioning Oracle Attack: Cracking Passwords Fast Keystream Reuse Attack: The Two Time Pad Problem Explained Sweet32 Attack: How Small Block Ciphers Leak Plaintext ECB Mode Weakness: Why Identical Blocks Leak and Forge Predictable IV Attack: How a Guessable IV Breaks CBC CBC Bit Flipping Attack: Tampering Without the Key Biased Nonce Attack: How a Few Predictable Bits Leak a Signing Key Invalid Curve Attack: How a Bad Point Leaks Your Private Key Small Subgroup Confinement Attack: Leaking a Diffie Hellman Key RSA Timing Attack: Recovering a Key From Response Latency RSA Signature Forgery: Forging a Signature With a Loose Verifier The Bleichenbacher Attack: an RSA Padding Oracle That Recovers Plaintext Cryptographic Oracle Attacks: One Bit at a Time Node.js Deserialization: When a Serializer Revives Functions Ruby YAML Deserialization: When YAML.load Builds Arbitrary Objects Ruby Marshal Deserialization: Why Marshal.load on Untrusted Data Is RCE Phar Deserialization: Object Injection With No unserialize() Call PHP Object Injection: When unserialize() Builds the Attacker’s Objects PyYAML Deserialization: Why yaml.load Runs Code Python Pickle Deserialization Is Code Execution TypeNameHandling in Json.NET and RCE risk Home Blog