corpus.blog
41554 blogs · [ { "id": "01a08797-e33d-71d1-8982-1a93cb155295", "title": "Three Confirmed Vulnerabilities in Truesec LAPSWebUI", "url": "https://labanskoller.se/blog/2026/03/16/three-confirmed-vulnerabilities-in-truesec-lapswebui/", "published_at": "2026-03-16T11:30:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93cbcb7a00", "title": "Vulnerability P1IB-LABAN-001: Missing Authorization", "url": "https://labanskoller.se/attachment/vulnerability-p1ib-laban-001-missing-authorization/", "published_at": "2024-08-15T23:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93cc16ecd0", "title": "Vulnerability P1IB-LABAN-002: Cross-Site Request Forgery", "url": "https://labanskoller.se/attachment/vulnerability-p1ib-laban-002-cross-site-request-forgery/", "published_at": "2024-08-15T23:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93cd14e63d", "title": "Vulnerability P1IB-LABAN-005: Plaintext Storage of a Password", "url": "https://labanskoller.se/attachment/vulnerability-p1ib-laban-005-plaintext-storage-of-a-password/", "published_at": "2024-08-15T23:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93cd9551ae", "title": "Vulnerability P1IB-LABAN-006: Insufficiently Protected Credentials", "url": "https://labanskoller.se/attachment/vulnerability-p1ib-laban-006-insufficiently-protected-credentials/", "published_at": "2024-08-15T23:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93ce1e90ae", "title": "Vulnerability P1IB-LABAN-008: Insecure defaults", "url": "https://labanskoller.se/attachment/vulnerability-p1ib-laban-008-insecure-defaults/", "published_at": "2024-08-15T23:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93ce2a9066", "title": "Wardriving 2024: Using Electricity Meter Readers to Get In", "url": "https://labanskoller.se/blog/2024/08/16/wardriving-2024-using-electricity-meter-readers-to-get-in/", "published_at": "2024-08-15T23:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93ceabd0c3", "title": "The Akamai Origin Disclosure Non-vulnerability", "url": "https://labanskoller.se/blog/2023/12/13/the-akamai-origin-disclosure-non-vulnerability/", "published_at": "2023-12-13T11:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93cfa3a280", "title": "Vulnerability Disclosure: Authentication Bypass in Auth0", "url": "https://labanskoller.se/blog/2023/10/24/vulnerability-disclosure-authentication-bypass-in-auth0/", "published_at": "2023-10-24T10:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93cfd8c920", "title": "Vulnerability Disclosure: Session Fixation in Auth0", "url": "https://labanskoller.se/blog/2023/10/18/vulnerability-disclosure-session-fixation-in-auth0/", "published_at": "2023-10-18T10:00:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93d032b639", "title": "Mobile Authenticator Apps Algorithm Support Review - 2023 Edition", "url": "https://labanskoller.se/blog/2023/03/16/mobile-authenticator-apps-algorithm-support-review-2023-edition/", "published_at": "2023-03-16T01:30:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93d0c9a7a6", "title": "Man-in-The-Middle Session Fixation in Securitas Direct My Pages", "url": "https://labanskoller.se/blog/2022/02/22/man-in-the-middle-session-fixation-in-securitas-direct-my-pages/", "published_at": "2022-02-22T21:55:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93d16e71c2", "title": "The Devise Extension That Peeled off One Layer of the Security Onion (CVE-2021-28680)", "url": "https://labanskoller.se/blog/2021/03/23/the-devise-extension-that-peeled-off-one-layer-of-the-security-onion-cve-2021-28680/", "published_at": "2021-03-23T20:35:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93d203a165", "title": "CSN Follow-Up: Another CAPTCHA Problem Hidden In Plain Sight", "url": "https://labanskoller.se/blog/2020/12/09/csn-follow-up-another-captcha-problem-hidden-in-plain-sight/", "published_at": "2020-12-08T23:30:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93d25a3773", "title": "CSN: Order PIN Maintenance Banner in Swedish", "url": "https://labanskoller.se/attachment/csn-order-pin-maintenance-banner-in-swedish/", "published_at": "2020-11-23T18:52:00+00:00" }, { "id": "01a08797-e33d-71d1-8982-1a93d2c5d8f7", "title": "CSN: New Choose Delivery Method Form in Swedish", "url": "https://labanskoller.se/attachment/csn-new-choose-delivery-method-form-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be2d7f2b2", "title": "CSN: New Order Personal Code Form in Swedish", "url": "https://labanskoller.se/attachment/csn-new-order-personal-code-form-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be3894774", "title": "CSN: Original Choose Delivery Method Form in Swedish", "url": "https://labanskoller.se/attachment/csn-original-choose-delivery-method-form-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be3a0ce8d", "title": "CSN: Original Incorrect PIN Message in Swedish", "url": "https://labanskoller.se/attachment/csn-original-incorrect-pin-message-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be43c2b4c", "title": "CSN: Original Login Menu in Swedish", "url": "https://labanskoller.se/attachment/csn-original-login-menu-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be457dff2", "title": "CSN: Original Order Personal Code Form in Swedish", "url": "https://labanskoller.se/attachment/csn-original-order-personal-code-form-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be496b324", "title": "CSN: Original Personal Code Order Confirmation in Swedish", "url": "https://labanskoller.se/attachment/csn-original-personal-code-order-confirmation-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be5519d3d", "title": "CSN: Original PIN Login Form in Swedish", "url": "https://labanskoller.se/attachment/csn-original-pin-login-form-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be5d954ab", "title": "CSN: Original Too Many Tries Message in Swedish", "url": "https://labanskoller.se/attachment/csn-original-too-many-tries-message-in-swedish/", "published_at": "2020-11-23T18:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be6a86444", "title": "Brute-Forcing Borrowers' PINs at the Swedish Board of Student Finance (CSN)", "url": "https://labanskoller.se/blog/2020/11/23/brute-forcing-borrowers-pins-at-the-swedish-board-of-student-finance-csn/", "published_at": "2020-11-23T16:00:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be6f304ae", "title": "Email Conversation With Yubico Support", "url": "https://labanskoller.se/attachment/email-conversation-with-yubico-support/", "published_at": "2019-12-30T14:00:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be707959f", "title": "PKI Is Hard - How Yubico Trusted OpenSSL And Got It Wrong", "url": "https://labanskoller.se/blog/2019/12/30/pki-is-hard-how-yubico-trusted-openssl-and-got-it-wrong/", "published_at": "2019-12-30T14:00:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be7b02266", "title": "Many Common Mobile Authenticator Apps Accept QR Codes for Modes They Don't Support", "url": "https://labanskoller.se/blog/2019/07/11/many-common-mobile-authenticator-apps-accept-qr-codes-for-modes-they-dont-support/", "published_at": "2019-07-11T20:00:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be841e07d", "title": "Solution to 35C3 Junior CTF Challenge \"Entrance\"", "url": "https://labanskoller.se/blog/2019/01/07/solution-to-35c3-junior-ctf-challenge-entrance/", "published_at": "2019-01-07T01:30:00+00:00" }, { "id": "01a08797-e33e-731e-94ec-188be8fd62b7", "title": "New Static Blog Using Hugo", "url": "https://labanskoller.se/blog/2019/01/04/new-static-blog-using-hugo/", "published_at": "2019-01-04T05:20:00+00:00" } ] posts Claim your blog
Back to labanskoller.se
Blog · corpus.blog/blogs/labanskoller.se/posts

labanskoller.se

labanskoller.se

2026

Three Confirmed Vulnerabilities in Truesec LAPSWebUIoriginal ↗
16 Mar 2026

2024

Vulnerability P1IB-LABAN-001: Missing Authorizationoriginal ↗
15 Aug 2024
Vulnerability P1IB-LABAN-002: Cross-Site Request Forgeryoriginal ↗
15 Aug 2024
Vulnerability P1IB-LABAN-005: Plaintext Storage of a Passwordoriginal ↗
15 Aug 2024
Vulnerability P1IB-LABAN-006: Insufficiently Protected Credentialsoriginal ↗
15 Aug 2024
Vulnerability P1IB-LABAN-008: Insecure defaultsoriginal ↗
15 Aug 2024
Wardriving 2024: Using Electricity Meter Readers to Get Inoriginal ↗
15 Aug 2024

2023

The Akamai Origin Disclosure Non-vulnerabilityoriginal ↗
13 Dec 2023
Vulnerability Disclosure: Authentication Bypass in Auth0original ↗
24 Oct 2023
Vulnerability Disclosure: Session Fixation in Auth0original ↗
18 Oct 2023
Mobile Authenticator Apps Algorithm Support Review - 2023 Editionoriginal ↗
16 Mar 2023

2022

Man-in-The-Middle Session Fixation in Securitas Direct My Pagesoriginal ↗
22 Feb 2022

2021

The Devise Extension That Peeled off One Layer of the Security Onion (CVE-2021-28680)original ↗
23 Mar 2021

2020

CSN Follow-Up: Another CAPTCHA Problem Hidden In Plain Sightoriginal ↗
8 Dec 2020
CSN: Order PIN Maintenance Banner in Swedishoriginal ↗
23 Nov 2020
CSN: New Choose Delivery Method Form in Swedishoriginal ↗
23 Nov 2020
CSN: New Order Personal Code Form in Swedishoriginal ↗
23 Nov 2020
CSN: Original Choose Delivery Method Form in Swedishoriginal ↗
23 Nov 2020
CSN: Original Incorrect PIN Message in Swedishoriginal ↗
23 Nov 2020
CSN: Original Login Menu in Swedishoriginal ↗
23 Nov 2020
CSN: Original Order Personal Code Form in Swedishoriginal ↗
23 Nov 2020
CSN: Original Personal Code Order Confirmation in Swedishoriginal ↗
23 Nov 2020
CSN: Original PIN Login Form in Swedishoriginal ↗
23 Nov 2020
CSN: Original Too Many Tries Message in Swedishoriginal ↗
23 Nov 2020
Brute-Forcing Borrowers' PINs at the Swedish Board of Student Finance (CSN)original ↗
23 Nov 2020

2019

Email Conversation With Yubico Supportoriginal ↗
30 Dec 2019
PKI Is Hard - How Yubico Trusted OpenSSL And Got It Wrongoriginal ↗
30 Dec 2019
Many Common Mobile Authenticator Apps Accept QR Codes for Modes They Don't Supportoriginal ↗
11 Jul 2019
Solution to 35C3 Junior CTF Challenge "Entrance"original ↗
7 Jan 2019
New Static Blog Using Hugooriginal ↗
4 Jan 2019