FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies

Vulnerabilities in NodeJS C/C++ add-on extensions

Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies

Data Theft in Salesforce: Manipulating Public Links

When Certificates Fail: A Story of Bypassed MFA in Remote Access

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff