What's in a tag name? JavaScript, apparently
2026-09-17T08:51:48Z•bdba8f94b8ee4c12566e76043ceb51c32a8127651d3ae51e8d6a565ee45ba0fd
access-controlai-security-testingapplication-securityauthentication-bypassbrowser-securitycookie-securitycsp-bypasscss-injectiondata-exfiltrationhttp-desynchronizationjwtparser-discrepancyrequest-smugglingsamlssrftoken-forgeryunicode-overflowurl-validationwaf-bypassweb-cache-poisoningweb-researchweb-securitywebsocketsxss
What happened
PortSwigger Research feed containing recent web security research on parser discrepancies, HTTP desynchronization/request smuggling, authentication bypasses, cookie and WAF bypasses, CSS/XSS data exfiltration, SSRF/URL validation, cache poisoning, timing attacks, token forgery, and security testing automation. The collection is primarily research and tooling content rather than a single confirmed vulnerability disclosure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- bdba8f94b8ee4c12566e76043ceb51c32a8127651d3ae51e8d6a565ee45ba0fd
- Enrichment time
- 2026-09-17T08:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.