The model isn't cooperating
2026-10-23T20:51:48Z•0d9accfd05ae89c3ddc28b1d6cdda66ece3cfdbb0e565836d2ae02e24e5a39c3
AI-security-researchBurp-SuiteCSS-injectionHTTP-desyncHTTP-request-smugglingHTTP/3JWTSAMLSSRFURL-validationWAF-bypassXSSaccess-controlauthentication-bypasscookie-securitydata-exfiltrationparser-discrepancysigned-tokenstiming-attacksweb-application-securityweb-cache-poisoningweb-security
What happened
PortSwigger Research publishes advanced web application security research covering HTTP request smuggling and desynchronization, parser discrepancies, authentication bypasses, cookie and WAF bypasses, CSS and XSS data exfiltration, SSRF and URL validation, web cache attacks, timing attacks, AI-assisted security testing, and high-speed HTTP/3 testing. The feed includes practical exploitation techniques such as SAML parser inconsistencies enabling authentication or administrative access, cookie prefix and HttpOnly bypasses, CRLF-based desync, Unicode overflow blocklist bypasses, and CSS-based ex
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- 0d9accfd05ae89c3ddc28b1d6cdda66ece3cfdbb0e565836d2ae02e24e5a39c3
- Enrichment time
- 2026-10-23T20:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.