The model isn't cooperating
2026-10-07T08:51:48Z•07adb06c2746592f301ca3119e19ed8fa9a3f20779dc7beec66d39f2f669f7a7
AI-security-researchBurp-SuiteCRLF-injectionCSP-bypassCSS-injectionHTTP-desyncHTTP-request-smugglingIDORJWTSAML-authentication-bypassSSRFURL-validation-bypassWAF-bypassWebSocket-securityXSSaccess-controlapplication-securitycache-poisoningcookie-securitydata-exfiltrationoffensive-securityparser-discrepancypenetration-testingweb-security
What happened
PortSwigger Research feed containing offensive web-security research on HTTP desynchronization and request smuggling, SAML authentication bypasses, cookie and WAF parser discrepancies, CSS and XSS data exfiltration, URL validation and SSRF bypasses, cache poisoning, WebSocket testing, AI-assisted security research, and related Burp Suite tooling. The supplied records are mostly research summaries rather than confirmed product vulnerabilities; no specific CVE identifiers are provided.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- 07adb06c2746592f301ca3119e19ed8fa9a3f20779dc7beec66d39f2f669f7a7
- Enrichment time
- 2026-10-07T08:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.