2024

• 01 Feb How one Parameter Pollution bug left many apps vulnerable to Account Takeovers

2023

• 21 Sep Stealing OAuth tokens with a relative wildcard URL