corpus.blog
41554 blogs · [ { "id": "01a0877f-d7e9-73c8-8f3b-fe3454167833", "title": "Remote Code Execution in Logseq (just another XSS to RCE in an Electron app)", "url": "https://gubello.me/blog/logseq-rce-via-pdf/", "published_at": "2025-08-21T14:00:53+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe3454b63660", "title": "Threat modeling: PhaaS, platform abuses, and content moderation", "url": "https://gubello.me/blog/threat-model-phaas-platform-abuses/", "published_at": "2025-03-07T10:14:31+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe3454e3b120", "title": "JavaScript-based PDF Viewers, Cross Site Scripting, and PDF files", "url": "https://gubello.me/blog/pdf-viewers-xss-and-pdf-files/", "published_at": "2024-08-26T22:35:53+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345578908e", "title": "Privacy Policy", "url": "https://gubello.me/privacy-policy/", "published_at": "2023-08-06T12:03:41+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe3455a28f40", "title": "Is China spreading propaganda in Italy (and worldwide)?", "url": "https://gubello.me/blog/is-china-spreading-propaganda-in-italy/", "published_at": "2020-03-17T23:57:24+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe34562e8bbb", "title": "Javascript Injection in six Android mail clients", "url": "https://gubello.me/blog/javascript-injection-in-six-android-mail-clients/", "published_at": "2020-02-15T10:26:54+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe3456a2e63a", "title": "About Chinese propaganda on Twitter: drawing data 📊", "url": "https://gubello.me/blog/about-chinese-propaganda-on-twitter-drawing-data/", "published_at": "2019-12-03T00:42:28+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe3456e77e39", "title": "About Iran and IRA Twitter datasets (for fun) – Part III", "url": "https://gubello.me/blog/about-iran-and-ira-twitter-datasets-for-fun-part-iii/", "published_at": "2019-09-15T13:40:29+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345728a66c", "title": "#Hack5Stelle", "url": "https://gubello.me/blog/hack5stelle/", "published_at": "2019-08-13T13:05:36+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe34578f866f", "title": "About Iran and IRA Twitter datasets (for fun) – Part II", "url": "https://gubello.me/blog/about-iran-and-ira-twitter-datasets-for-fun-part-two/", "published_at": "2019-05-20T00:32:37+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe3457c99e95", "title": "Router D-Link DVA-5592 – Authentication Bypass", "url": "https://gubello.me/blog/router-dlink-dva-5592-authentication-bypass/", "published_at": "2018-12-16T23:30:10+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe34585126c2", "title": "About Iran and IRA Twitter datasets (for fun) – Part I", "url": "https://gubello.me/blog/about-iran-and-ira-twitter-datasets-for-fun-part-one/", "published_at": "2018-12-07T18:29:05+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345944f6be", "title": "Configurare un Pi-Hole portatile", "url": "https://gubello.me/blog/configurare-pi-hole-portatile/", "published_at": "2018-11-02T12:02:07+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345984950b", "title": "Italian Hacker Camp 2018", "url": "https://gubello.me/blog/italian-hacker-camp-2018/", "published_at": "2018-08-18T08:48:50+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345a385f8b", "title": "From XSS to RCE in Simplenote 1.1.3", "url": "https://gubello.me/blog/from-xss-to-rce-in-simplenote/", "published_at": "2018-07-29T16:20:59+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345a65a1fc", "title": "Quali utenti usano 🇮🇹 nel nickname di Twitter?", "url": "https://gubello.me/blog/quali-utenti-usano-bandiera-ita-nel-nickname-di-twitter/", "published_at": "2018-07-19T10:40:28+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345b3b3dc5", "title": "HTML Injection in Signal Desktop 1.10.1", "url": "https://gubello.me/blog/html-injection-in-signal-desktop/", "published_at": "2018-05-16T15:22:36+00:00" }, { "id": "01a0877f-d7e9-73c8-8f3b-fe345b8019e8", "title": "GD bbPress Attachments 2.5 – Authenticated stored XSS", "url": "https://gubello.me/blog/gd-bbpress-attachments-2-5-authenticated-stored-xss/", "published_at": "2018-05-13T23:58:19+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a51aaa84d", "title": "Stored XSS in Microsoft Bing", "url": "https://gubello.me/blog/stored-xss-in-microsoft-bing/", "published_at": "2018-04-21T10:30:51+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a525bbb14", "title": "WP Live Chat Support 8.0.05 – Stored XSS", "url": "https://gubello.me/blog/wp-live-chat-support-8-0-05-stored-xss/", "published_at": "2018-04-08T22:48:12+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a52ced96f", "title": "Events Manager 5.8.1.1 – Stored XSS", "url": "https://gubello.me/blog/events-manager-authenticated-stored-xss/", "published_at": "2018-03-25T22:01:17+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a53b9d4c7", "title": "Multiple stored XSS in AOL Mail", "url": "https://gubello.me/blog/multiple-stored-xss-in-aol-mail/", "published_at": "2018-03-23T18:05:32+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a53e82de9", "title": "Utilizzare il Raspberry Pi 3 via Termux", "url": "https://gubello.me/blog/utilizzare-il-raspberry-pi-3-via-termux/", "published_at": "2018-03-07T09:08:20+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a5413c6bd", "title": "Bookly #1 WordPress Booking Plugin (Lite) 13.2 – Blind Stored XSS", "url": "https://gubello.me/blog/bookly-blind-stored-xss/", "published_at": "2018-02-09T23:01:23+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a548d8389", "title": "Stored XSS via cloud attachment", "url": "https://gubello.me/blog/stored-xss-via-cloud-attachment/", "published_at": "2018-01-20T17:16:52+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a54d17ba7", "title": "Stored XSS in touch.mail.ru", "url": "https://gubello.me/blog/stored-xss-in-touch-mail-ru/", "published_at": "2017-12-27T17:55:41+00:00" }, { "id": "01a0877f-d7ea-7124-9ba3-c58a550102b4", "title": "XSSSonar: python tool to look for XSS", "url": "https://gubello.me/blog/xsssonar/", "published_at": "2017-12-16T16:37:19+00:00" } ] posts Claim your blog
Back to gubello.me
Blog · corpus.blog/blogs/gubello.me/posts

gubello.me

gubello.me

2025

Remote Code Execution in Logseq (just another XSS to RCE in an Electron app)original ↗
21 Aug 2025
Threat modeling: PhaaS, platform abuses, and content moderationoriginal ↗
7 Mar 2025

2024

JavaScript-based PDF Viewers, Cross Site Scripting, and PDF filesoriginal ↗
26 Aug 2024

2023

Privacy Policyoriginal ↗
6 Aug 2023

2020

Is China spreading propaganda in Italy (and worldwide)?original ↗
17 Mar 2020
Javascript Injection in six Android mail clientsoriginal ↗
15 Feb 2020

2019

About Chinese propaganda on Twitter: drawing data 📊original ↗
3 Dec 2019
About Iran and IRA Twitter datasets (for fun) – Part IIIoriginal ↗
15 Sept 2019
#Hack5Stelleoriginal ↗
13 Aug 2019
About Iran and IRA Twitter datasets (for fun) – Part IIoriginal ↗
20 May 2019

2018

Router D-Link DVA-5592 – Authentication Bypassoriginal ↗
16 Dec 2018
About Iran and IRA Twitter datasets (for fun) – Part Ioriginal ↗
7 Dec 2018
Configurare un Pi-Hole portatileoriginal ↗
2 Nov 2018
Italian Hacker Camp 2018original ↗
18 Aug 2018
From XSS to RCE in Simplenote 1.1.3original ↗
29 Jul 2018
Quali utenti usano 🇮🇹 nel nickname di Twitter?original ↗
19 Jul 2018
HTML Injection in Signal Desktop 1.10.1original ↗
16 May 2018
GD bbPress Attachments 2.5 – Authenticated stored XSSoriginal ↗
13 May 2018
Stored XSS in Microsoft Bingoriginal ↗
21 Apr 2018
WP Live Chat Support 8.0.05 – Stored XSSoriginal ↗
8 Apr 2018
Events Manager 5.8.1.1 – Stored XSSoriginal ↗
25 Mar 2018
Multiple stored XSS in AOL Mailoriginal ↗
23 Mar 2018
Utilizzare il Raspberry Pi 3 via Termuxoriginal ↗
7 Mar 2018
Bookly #1 WordPress Booking Plugin (Lite) 13.2 – Blind Stored XSSoriginal ↗
9 Feb 2018
Stored XSS via cloud attachmentoriginal ↗
20 Jan 2018

2017

Stored XSS in touch.mail.ruoriginal ↗
27 Dec 2017
XSSSonar: python tool to look for XSSoriginal ↗
16 Dec 2017