corpus.blog
41554 blogs · [ { "id": "01a08766-3ea1-7171-82a0-567cbc44c2be", "title": "Multiple Vulnerabilities in TCPDF", "url": "https://d3adend.org/blog/posts/tcpdf-multiple-vulnerabilities/", "published_at": "2025-02-25T10:16:16+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cbcc93036", "title": "An Example WAF XSS Bypass", "url": "https://d3adend.org/blog/posts/example-waf-xss-bypass/", "published_at": "2024-06-25T11:46:16+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cbda5b899", "title": "Exploring the Security of KaiOS Mobile Applications", "url": "https://d3adend.org/blog/posts/exploring-the-security-of-kaios-mobile-applications/", "published_at": "2020-08-24T06:47:27+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cbe79695e", "title": "Multiple Vulnerabilities in Multiple Vulnerabilities in KaiOS Pre-installed Mobile Applications", "url": "https://d3adend.org/blog/posts/multiple-vulnerabilities-in-kaios-preinstalled-mobile-applications/", "published_at": "2020-08-21T13:31:16+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cbe9afc58", "title": "Eversec Cloud Write-ups (Internal NCC Group CTF 2020)", "url": "https://d3adend.org/blog/posts/eversec-cloud-write-ups/", "published_at": "2020-04-04T17:17:01+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cbf4e6d47", "title": "Multiple Vulnerabilities in Alcatel Flip 2", "url": "https://d3adend.org/blog/posts/multiple-vulnerabilities-in-alcatel-flip-2/", "published_at": "2019-11-22T13:31:16+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cbfedb718", "title": "Cloudiot Write-ups (Internal NCC Group CTF 2019)", "url": "https://d3adend.org/blog/posts/cloudiot-write-ups/", "published_at": "2019-06-05T18:47:11+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc064dd81", "title": "Argument Injection Hammer Burp Suite Extension", "url": "https://d3adend.org/blog/posts/argument-injection-hammer/", "published_at": "2019-05-17T06:47:27+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc076b9ea", "title": "Microcorruption Write-ups (1 - 10)", "url": "https://d3adend.org/blog/posts/microcorruption-write-ups-1-10/", "published_at": "2018-10-01T17:41:44+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc0df20c4", "title": "Dialogic PowerMedia XMS Multiple Vulnerabilities", "url": "https://d3adend.org/blog/posts/dialogic-powermedia-xms-multiple-vulnerabilities/", "published_at": "2018-06-24T09:57:50+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc1c1de41", "title": "Maxthon Browser Arbitrary File Write, Login Page UXSS, and SQL Injection", "url": "https://d3adend.org/blog/posts/maxthon-browser-arbitrary-file-write-login-page-uxss-and-sql-injection/", "published_at": "2016-11-10T13:31:16+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc2268f29", "title": "React Native Development Server Remote OS Command Injection and Remote File Disclosure", "url": "https://d3adend.org/blog/posts/react-native-development-server-remote-os-command-injection-and-remote-file-disclosure/", "published_at": "2016-05-11T18:52:45+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc24eddff", "title": "Android Anti-Hooking Techniques in Java", "url": "https://d3adend.org/blog/posts/android-anti-hooking-techniques-in-java/", "published_at": "2015-12-23T13:08:37+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc333ea6a", "title": "Puffin Browser RCE and Remote File Disclosure", "url": "https://d3adend.org/blog/posts/puffin-browser-rce-and-remote-file-disclosure/", "published_at": "2015-12-08T14:55:52+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc4102a67", "title": "Abusing UIWebView baseURL settings in the Cordova ChildBrowser Plug-in", "url": "https://d3adend.org/blog/posts/abusing-uiwebview-baseurl-settings-in-the-cordova-childbrowser-plug-in/", "published_at": "2015-04-03T05:11:20+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc48c5a89", "title": "Javelin Browser RCE and Password Manager Information Disclosure", "url": "https://d3adend.org/blog/posts/javelin-browser-rce-and-password-manager-information-disclosure/", "published_at": "2015-04-02T05:28:57+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc52d3ed1", "title": "Cordova LaunchMyApp Plug-in Remote JavaScript Injection", "url": "https://d3adend.org/blog/posts/cordova-launchmyapp-plug-in-remote-javascript-injection/", "published_at": "2014-12-17T11:29:26+00:00" }, { "id": "01a08766-3ea1-7171-82a0-567cc604fe7f", "title": "Exploitation of Open URL AJAX Requests and DOM-based XSS using CORS", "url": "https://d3adend.org/blog/posts/exploitation-of-open-url-ajax-requests-and-dom-based-xss-using-cors/", "published_at": "2014-12-09T14:13:07+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e769545ccc2", "title": "Understanding Fragment Injection", "url": "https://d3adend.org/blog/posts/understanding-fragment-injection/", "published_at": "2014-06-18T11:55:54+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e769592ae4a", "title": "Cordova InAppBrowser Remote Privilege Escalation", "url": "https://d3adend.org/blog/posts/cordova-inappbrowser-remote-privilege-escalation/", "published_at": "2014-04-14T04:11:49+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e769653a6e6", "title": "Why cross-domain policy files are occasionally interesting to look at.", "url": "https://d3adend.org/blog/posts/why-cross-domain-policy-files-are-occasionally-interesting-to-look-at/", "published_at": "2013-07-23T14:15:39+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e76968d8ce4", "title": "Abusing WebView JavaScript Bridges", "url": "https://d3adend.org/blog/posts/abusing-webview-javascript-bridges/", "published_at": "2012-12-21T11:50:36+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e769700d5e5", "title": "Content-Type Blues", "url": "https://d3adend.org/blog/posts/content-type-blues/", "published_at": "2012-02-28T23:12:28+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e7697261c66", "title": "Bypassing Flash’s local-with-filesystem Sandbox Redux", "url": "https://d3adend.org/blog/posts/bypassing-flashs-local-with-filesystem-sandbox-redux/", "published_at": "2011-12-11T18:27:21+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e7697a00f8b", "title": "Don't Believe Everything You Read", "url": "https://d3adend.org/blog/posts/dont-believe-everything-you-read/", "published_at": "2011-12-06T04:53:13+00:00" }, { "id": "01a08766-3ea2-72d5-a97a-4e7697fe2578", "title": "No Love for the Null Byte", "url": "https://d3adend.org/blog/posts/no-love-for-the-null-byte/", "published_at": "2011-09-21T21:23:32+00:00" } ] posts Claim your blog
Back to d3adend.org
Blog · corpus.blog/blogs/d3adend.org/posts

d3adend.org

d3adend.org

2025

Multiple Vulnerabilities in TCPDForiginal ↗
25 Feb 2025

2024

An Example WAF XSS Bypassoriginal ↗
25 Jun 2024

2020

Exploring the Security of KaiOS Mobile Applicationsoriginal ↗
24 Aug 2020
Multiple Vulnerabilities in Multiple Vulnerabilities in KaiOS Pre-installed Mobile Applicationsoriginal ↗
21 Aug 2020
Eversec Cloud Write-ups (Internal NCC Group CTF 2020)original ↗
4 Apr 2020

2019

Multiple Vulnerabilities in Alcatel Flip 2original ↗
22 Nov 2019
Cloudiot Write-ups (Internal NCC Group CTF 2019)original ↗
5 Jun 2019
Argument Injection Hammer Burp Suite Extensionoriginal ↗
17 May 2019

2018

Microcorruption Write-ups (1 - 10)original ↗
1 Oct 2018
Dialogic PowerMedia XMS Multiple Vulnerabilitiesoriginal ↗
24 Jun 2018

2016

Maxthon Browser Arbitrary File Write, Login Page UXSS, and SQL Injectionoriginal ↗
10 Nov 2016
React Native Development Server Remote OS Command Injection and Remote File Disclosureoriginal ↗
11 May 2016

2015

Android Anti-Hooking Techniques in Javaoriginal ↗
23 Dec 2015
Puffin Browser RCE and Remote File Disclosureoriginal ↗
8 Dec 2015
Abusing UIWebView baseURL settings in the Cordova ChildBrowser Plug-inoriginal ↗
3 Apr 2015
Javelin Browser RCE and Password Manager Information Disclosureoriginal ↗
2 Apr 2015

2014

Cordova LaunchMyApp Plug-in Remote JavaScript Injectionoriginal ↗
17 Dec 2014
Exploitation of Open URL AJAX Requests and DOM-based XSS using CORSoriginal ↗
9 Dec 2014
Understanding Fragment Injectionoriginal ↗
18 Jun 2014
Cordova InAppBrowser Remote Privilege Escalationoriginal ↗
14 Apr 2014

2013

Why cross-domain policy files are occasionally interesting to look at.original ↗
23 Jul 2013

2012

Abusing WebView JavaScript Bridgesoriginal ↗
21 Dec 2012
Content-Type Bluesoriginal ↗
28 Feb 2012

2011

Bypassing Flash’s local-with-filesystem Sandbox Reduxoriginal ↗
11 Dec 2011
Don't Believe Everything You Readoriginal ↗
6 Dec 2011
No Love for the Null Byteoriginal ↗
21 Sept 2011