Scalable Vector Grief

2026-10-28T08:51:48Z•846680d40be57aa4d1877107fc87793ea902769b4a9076e096dae283a1ae14ac
application-securityauthentication-bypassbrowser-securityburp-suitecache-poisoningcookie-securitycrlf-injectioncss-injectionhttp-desynchttponly-bypassjavascript-executionjwtoffensive-security-researchparser-differentialrequest-smugglingsamlssrfsvg-sanitizationtiming-attackstoken-forgeryurl-validationwaf-bypassweb-securitywebsocketsxss

What happened

PortSwigger Research feed containing offensive web-security research and tooling updates. Topics include SVG/CSS sanitization bypasses, browser-side JavaScript execution, HTTP request smuggling and desynchronization, SAML authentication bypasses, cookie and WAF parser discrepancies, cache poisoning, SSRF and URL-validation bypasses, XSS, token forgery, timing attacks, WebSocket testing, and AI-assisted security testing. The most severe themes are authentication bypass, session-cookie theft, HTTP desync, and arbitrary JavaScript execution, though the feed is a collection of publications rather于

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
portswigger_research
Record identifier
846680d40be57aa4d1877107fc87793ea902769b4a9076e096dae283a1ae14ac
Enrichment time
2026-10-28T08:51:48Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Scalable Vector Grief · Baitaphish