The model isn't cooperating

2026-10-23T20:51:48Z•0d9accfd05ae89c3ddc28b1d6cdda66ece3cfdbb0e565836d2ae02e24e5a39c3
AI-security-researchBurp-SuiteCSS-injectionHTTP-desyncHTTP-request-smugglingHTTP/3JWTSAMLSSRFURL-validationWAF-bypassXSSaccess-controlauthentication-bypasscookie-securitydata-exfiltrationparser-discrepancysigned-tokenstiming-attacksweb-application-securityweb-cache-poisoningweb-security

What happened

PortSwigger Research publishes advanced web application security research covering HTTP request smuggling and desynchronization, parser discrepancies, authentication bypasses, cookie and WAF bypasses, CSS and XSS data exfiltration, SSRF and URL validation, web cache attacks, timing attacks, AI-assisted security testing, and high-speed HTTP/3 testing. The feed includes practical exploitation techniques such as SAML parser inconsistencies enabling authentication or administrative access, cookie prefix and HttpOnly bypasses, CRLF-based desync, Unicode overflow blocklist bypasses, and CSS-based ex

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
portswigger_research
Record identifier
0d9accfd05ae89c3ddc28b1d6cdda66ece3cfdbb0e565836d2ae02e24e5a39c3
Enrichment time
2026-10-23T20:51:48Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.