Just another Gmail XSS :)
adico.me/post/xss-in-gmail-s…
It's IIS 4 all over again! blog.qualys.com/vulnerabilit…
Adi Cohen retweeted
CVE-2019-14809 net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname() ... cve.mitre.org/cgi-bin/cvenam…







